Senior Corporate Engineer

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take charge of the architecture, security, and daily operations of our enterprise Okta tenant, encompassing the delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust.

• Design and uphold Infrastructure-as-Code for identity and access management using Terraform, creating reusable modules, establishing guardrails, and developing automated workflows integrated with HRIS and ITSM systems to ensure least-privilege access and prompt provisioning/deprovisioning.

• Architect, manage, and consistently enhance Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; promote zero-trust segmentation, observability, capacity planning, and vendor/partner management.

• Lead and engage in incident response for identity and network events, facilitate swift mitigation and root-cause analysis, and implement sustainable remediations through post-incident reviews and change management.

• Standardize and manage certificate and key lifecycles for SAML/TLS across SaaS applications; reduce manual tasks through scripting and comprehensive runbooks that enhance reliability and auditability.

• Collaborate with Security and Compliance to fulfill controls and audit requirements (e.g., access reviews, evidence collection), enhance access risk management, and achieve license savings through automated revocation and right-sizing.

• Mentor colleagues, elevate documentation and operational excellence, and contribute to shaping the roadmap by prioritizing high-impact initiatives in a rapidly changing environment.

⛳️ Requirements

• 7+ years of experience in corporate IT engineering or a related field, focusing on identity and access management (IAM) and enterprise networking.

• 3+ years of hands-on administration of Okta in a production environment (1,000+ users), including SSO integrations (SAML/OIDC), SCIM provisioning, MFA, and policy design.

• 2+ years of implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or a similar IGA platform.

• Proficient in Infrastructure-as-Code and automation: Terraform (mandatory) and at least one scripting language (Python, Bash, or PowerShell).

• Proven experience in planning and executing certificate rotations and key management for SAML/TLS across multiple SaaS applications.

• Practical experience in operating and troubleshooting office network infrastructure (switching, routing, wireless, firewalls) and VPN/zero-trust access using technologies such as Cisco/Meraki, Aruba, and Palo Alto.

• Established track record in leading critical incidents and executing structured change management, including writing runbooks and performing post-incident reviews.

• Familiarity with endpoint management and device trust (e.g., Jamf, Kandji, Intune) and integrating device posture with access controls.

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent practical experience.

🏝️ Benefits

• Competitive salary

• New hire equity grant

• Annual refresh grants

• Flex First remote work policy