Maintain and scale enterprise identity governance and access management across Active Directory, Microsoft Entra ID, cloud, SaaS, and regulated environments. Manage identity lifecycles, access reviews, Conditional Access, authentication, privileged access, SSO, federation, certificates, and non-human identities. Develop automation with PowerShell, Python, Microsoft Graph, and REST APIs while partnering with security teams to investigate identity risks and support compliance controls.
As an Identity Governance Engineer at Impulse, you will maintain, enhance, and scale our enterprise identity and access management capabilities. This role will help ensure that users, devices, administrators, applications, and other identities have appropriate access throughout their lifecycle. The Identity Governance Engineer will work across Information Security, IT, Engineering, and business teams to strengthen identity governance, authentication, privileged access, directory services, and identity automation across corporate, cloud, and regulated environments. This is a hands-on engineering role for someone with strong experience in Active Directory, Microsoft Entra ID, identity governance, Conditional Access, and enterprise authentication technologies.
Responsibilities
- 3+ years of professional relative experience
- Maintain and enhance enterprise Identity Governance and Administration (IGA) capabilities
- Manage and improve identity lifecycle processes, including provisioning, deprovisioning, access changes, and periodic access reviews
- Maintain and enhance Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities, and hybrid identity integrations
- Maintain and continuously improve Microsoft Entra Conditional Access, authentication methods, and identity security policies
- Support and enhance certificate-based authentication for user and device identities
- Maintain and improve Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM) capabilities
- Maintain enterprise SSO, federation, and automated provisioning integrations using technologies such as SAML, OAuth/OIDC, and SCIM
- Govern employee, contractor, partner, B2B, service account, application, and other non-human identities
- Maintain and enhance identity governance across Microsoft 365, Azure, AWS, SaaS applications, and enterprise systems
- Develop automation using technologies such as PowerShell, Microsoft Graph, REST APIs, and Python. Partner with Security Operations and Security Engineering to monitor, investigate, and remediate identity-related security risks. Maintain identity and access controls supporting organizational security and compliance requirements
Minimum Qualifications
- 5+ years of professional relative experience
- Experience in Identity and Access Management, Identity Governance, Security Engineering, or a related discipline
- Strong hands-on experience administering and engineering Microsoft Active Directory
- Strong hands-on experience with Microsoft Entra ID / Azure AD and hybrid identity environments
- Experience managing Conditional Access, MFA, authentication methods, and privileged access
- Experience with identity lifecycle management, RBAC, least privilege, access reviews, and entitlement governance
- Experience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect, and SCIM
- Experience with scripting and automation using PowerShell and APIs. Working knowledge of PKI, X.509 certificates, and certificate-based authentication
- Strong troubleshooting, documentation, and communication skills
Preferred Skills and Experience
- Experience with Microsoft Entra ID Governance, including Entitlement Management, Access Reviews, Lifecycle Workflows, and PIM
- Experience with Entra certificate-based authentication, Active Directory certificate authentication, 802.1X/EAP-TLS, and user/device certificates
- Experience with enterprise PAM technologies. Experience governing identity and access across Azure, AWS, and SaaS environments
- Experience with B2B/external identity and non-human identity governance
- Experience securing Active Directory and Entra ID against identity-based attacks
- Experience with SIEM and identity security monitoring
- Experience working in aerospace, defense, government contracting, or another regulated industry
- Familiarity with CMMC, NIST SP 800-171, NIST SP 800-172, or NIST SP 800-53
Additional Information:
Compensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity. In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan.
Impulse Space’s spacecraft manufacturing business is subject to U.S. export regulations including the International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR). This position requires applicants to be either U.S. Persons (i.e., U.S. citizen, U.S. national, lawful permanent U.S. resident (green card holder), an individual granted asylum in the U.S., or an individual admitted in U.S. refugee status) or persons eligible to obtain an export license from the U.S. Departments of State, Commerce, or other applicable U.S. government agencies. Learn more about the ITAR here.
Impulse Space is an Equal Opportunity Employer; employment with Impulse Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
About
Impulse Space, the in-space transportation company founded by Tom Mueller, is opening access beyond Low Earth Orbit (LEO) with its fleet of in-space transportation vehicles. The high-energy Helios vehicle unlocks orbits beyond LEO with its powerful Deneb engine, dropping off payloads in MEO, GEO, heliocentric, lunar, and other planetary orbits. The flight-proven Mira vehicle uses a nontoxic, high-impulse chemical propulsion system to offer orbital transport, constellation deployment, and precision reentry services to customers throughout LEO. Led by a team that delivered the most reliable rockets in history, Impulse provides economical and efficient in-space transportation by reliably and rapidly getting customers where they want to go.
Impulse Space El Segundo, California, USA Office
El Segundo, CA, United States, 90245
Similar Jobs
Biotech • Pharmaceutical
Lead SailPoint ISC integrations and governance: onboard applications, configure connectors and APIs, implement lifecycle (Joiner/Mover/Leaver), enforce least-privilege access, troubleshoot identity/provisioning issues, support testing and documentation, and collaborate with security, compliance and business teams in a regulated environment.
Top Skills:
ConnectorsIamIdentity GovernanceJSONRbacRest ApisSailpoint IscSAPSod
Machine Learning • Payments • Security • Software • Financial Services
Leads complex, multi-workstream product initiatives as a principal Product Owner. Owns product vision, strategy, backlog integrity, prioritization, and Scrum team alignment. Coordinates Product, Engineering, Design, Delivery, and other stakeholders; improves execution discipline, transparency, and outcome tracking. Stabilizes programs with fragmented ownership or elevated delivery risk while ensuring customer and business requirements are addressed. Requires substantial Product Owner or Senior Product Manager experience, preferably in payments or financial services.
Top Skills:
Agile DevelopmentData VisualizationScrumUx Design
Aerospace • Information Technology • Software • Cybersecurity • Design • Defense • Manufacturing
Designs, integrates, tests, debugs, and leads development of embedded flight software for satellite and payload systems. Responsibilities include software-hardware integration, requirements analysis, cyber vulnerability analysis, cyber monitoring algorithms, configuration automation, documentation, quality assurance, and delivery coordination. The role interfaces with multidisciplinary engineering teams and supports safety, security, and performance objectives for commercial and government space programs.
Top Skills:
BitbucketCC++ConfluenceCyber Monitoring AlgorithmsDevOpsEmbedded SystemsGitlabJavaJIRAPythonReal-Time SoftwareWireshark
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
