Identity Governance Engineer

About the role

Impulse Space is looking for an Identity Governance Engineer in Redondo Beach to maintain, enhance and scale its enterprise identity and access management capabilities. The role ensures that users, devices, administrators, applications and other identities have appropriate access throughout their lifecycle, working across Information Security, IT, Engineering and business teams. It is a hands-on engineering role focused on Active Directory, Microsoft Entra ID, identity governance, Conditional Access and enterprise authentication.

Key responsibilities

• Maintain and enhance enterprise Identity Governance and Administration (IGA) capabilities
• Manage identity lifecycle processes, including provisioning, deprovisioning, access changes and periodic access reviews
• Maintain Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities and hybrid identity integrations
• Improve Entra Conditional Access, authentication methods and identity security policies
• Support certificate-based authentication for users and devices
• Maintain Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM)
• Support SSO, federation and automated provisioning using SAML, OAuth/OIDC and SCIM
• Govern employee, contractor, partner, B2B, service account, application and other non-human identities
• Extend identity governance across Microsoft 365, Azure, AWS, SaaS applications and enterprise systems
• Build automation with PowerShell, Microsoft Graph, REST APIs and Python, and work with Security Operations and Security Engineering to remediate identity-related risks

Required profile

• 5+ years of professional experience in Identity and Access Management, Identity Governance, Security Engineering or a related discipline
• Hands-on experience administering and engineering Microsoft Active Directory and Microsoft Entra ID / Azure AD in hybrid environments
• Experience managing Conditional Access, MFA, authentication methods and privileged access
• Experience with identity lifecycle management, RBAC, least privilege, access reviews and entitlement governance
• Experience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect and SCIM
• Scripting and automation with PowerShell and APIs; working knowledge of PKI, X.509 certificates and certificate-based authentication
• Strong troubleshooting, documentation and communication skills

Preferred skills and experience

• Entra ID Governance, Entitlement Management, Access Reviews, Lifecycle Workflows and PIM
• Entra certificate-based authentication, 802.1X/EAP-TLS and enterprise PAM
• B2B/external and non-human identity governance, identity-based attack protection, SIEM monitoring
• Aerospace, defense, government contracting or regulated industry background
• Familiarity with CMMC, NIST SP 800-171, 800-172 or 800-53

The stated pay range is $140,000 - $180,000 per year. Full-time hires may also be eligible for stock options, medical, vision and dental coverage and a 401(k) plan. The position is subject to U.S. export regulations (ITAR/EAR) and requires U.S. persons or those eligible for an export license.