Enterprise Security Engineer, Pave

• 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company
• Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one
• Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
• Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner
• A track record of shipped automations with concrete before/after impact
• Demonstrated, specific use of AI tooling in your own workflows

Desirable

• Security at Pave protects the world's largest real-time compensation dataset and the company that runs on it
• The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains
• As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things
• Identity & Access Management:
• Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
• Keep the RBAC model current and consistently enforced, with automation that prevents drift
• Compliance Operations:
• Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
• Automate evidence collection and user access reviews
• Endpoint & SaaS Security:
• Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
• Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
• Automation & AI:
• Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents
• Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
• Partnership:
• Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient