Identity Platform at k2spacecorporation

Compensation

$150,000 – $220,000/yr

Location: Los Angeles, California
Type: Full-time
Level: not_specified
Posted: Aug 19, 2026

Description

K2 is seeking an experienced Identity Engineer responsible for designing, building, and running an enterprise identity platform. This role involves governing authentication and authorization across various environments, focusing on least-privilege access, lifecycle automation, and secure access management. The ideal candidate will contribute to a fast-paced, high-growth startup environment focused on developing advanced satellite platforms.

Required Skills

Identity and Access Management
Security Engineering
Infrastructure Engineering
Enterprise Identity Provider
Okta
Microsoft Entra ID
Ping
Google Identity
SAML
OIDC
OAuth 2.0
SCIM
LDAP
Kerberos
RBAC
ABAC
Privileged Access Management
Secrets Management
HashiCorp Vault
AWS
Azure
GCP

Additional Information

Required Previous Experiences: 5+ years of experience in identity and access management, security engineering, or infrastructure engineering, preferably in a fast-paced startup or technology environment.
Hands-on experience administering an enterprise identity provider (e.g., Okta, Microsoft Entra ID, Ping, or Google Identity), including SSO, MFA, and conditional access.
Experience designing and implementing identity lifecycle automation, RBAC or ABAC access models, and access review processes.
Experience with privileged access management and secrets management for both human and machine identities, such as HashiCorp Vault or equivalent.
Experience with cloud IAM in AWS, Azure, or GCP, including least-privilege role and policy design.
Preferred Qualifications: Bachelor’s degree (or equivalent) in computer science or engineering
Identity certifications such as Okta Certified Administrator, Microsoft Identity and Access Administrator (SC-300), or CISSP, or equivalent hands-on experience
Experience managing identity resources with infrastructure as code (Terraform, CloudFormation, or CDK)
Experience with policy-as-code frameworks such as OPA or Cedar
Experience with identity threat detection and response (ITDR) and building identity-focused detections
Experience integrating modern identity with legacy or on-premise systems, including Active Directory modernization
Experience with identity and access control for engineering, manufacturing, OT, or mission and ground segment environments
Prior experience in a defense, aerospace, or other ITAR-regulated environment