Staff IAM Engineer, Ironclad
$170-190k
Offers Equity
More information about location
2+ days a week in office
Enterprise software for managing contracts
Be an early applicant
Enterprise software for managing contracts
501-1000 employees
Be an early applicant
$170-190k
Offers Equity
More information about location
2+ days a week in office
501-1000 employees
Company mission
To power the world’s contracts.
Role
Who you are
- 4+ years of experience in security-focused software engineering, corporate engineering, IT, and/or program management
- Demonstrated ability to identify risks and vulnerabilities in IT and business systems, balance risk with company priorities, and communicate risk to stakeholders
- Strong understanding of IAM protocols and standards, including SAML 2.0, OIDC, SCIM, LDAP, OAuth, and familiarity with X.509
- Experience with IdP and identity tooling (e.g., Okta, Active Directory, Google Workspace), including defining and enforcing Role-Based Access Control (RBAC) policies and Least Privilege principles across enterprise applications
- Familiarity with endpoint engineering for macOS and Windows
- SW Eng/Dev engineering and DevOps proficiency: Python and/or Go, Terraform, GAM scripting, Powershell scripting, JSON, Javascript
- Demonstrated experience deploying new IT systems and processes across the organization with high user satisfaction
- Strong analytical and problem-solving skills, attention to detail, and ability to operate independently with a high level of ownership
- Experience with Okta, Salesforce, NetSuite, Workday, GCP, GWP, Microsoft Entra/Azure/Intune, JAMF
- Backend and API testing/experience is a plus
What the job involves
- In this role, you’ll own security-critical identity and corporate security controls that protect Ironclad’s people, systems, and data
- You’ll work cross-functionally with IT & Business Systems, Security Detection & Response, Trust & Compliance, and application owners to ensure access is appropriate, devices are trusted, and audit and monitoring requirements are met without sacrificing a great employee experience
- Support implementation and operations of our Identity Governance & Administration (IGA) platform to ensure employees gain appropriate access for their role, approvals are captured, and access is revoked efficiently upon separation
- Access control design as a security control by defining and enforcing RBAC standards for sensitive systems
- Continuous improvement of identity controls by reducing standing privileges and hardening authentication policies (SSO, MFA)
- Lead the integration of new SaaS applications into our SSO (Single Sign-On) and MFA (Multi-Factor Authentication) ecosystem, providing security oversight for business systems implementations and operations
- Evolve our corporate device trust program so only compliant devices can access corporate and production systems
- Support endpoint security efforts including security policies, controls, and vulnerability management across macOS and Windows
- Partner with Security Detection & Response to ensure visibility into corporate systems, including development of scripts and integrations as needed
- Partner with Trust & Compliance to streamline or automate evidence collection to support internal and independent audits (e.g., SOC2)
- Conduct periodic access reviews and audits; investigate and resolve identity- and access-related security incidents
- Design, document, and execute plans to identify gaps and continuously improve access management lifecycle and identity architecture
Our take
Business contracting is often inefficient and messy, with approvals required from various stakeholders and many processes still paper-based. Ironclad is a platform that digitises, automates, and streamlines contract workflows, allowing legal teams to focus on legal work rather than paperwork. Its platform features collaborative tools that facilitate business operations and extract and catalogue contract metadata, making information easier to access and act upon. Its enterprise customers include Dropbox, Mastercard, Pixar, Fox, and L’Oréal.
Despite its success, Ironclad faces competition in the $3 billion contract lifecycle management industry from major players like DocuSign and emerging ones like Contractbook. The company recently announced Ironclad Signature, marking its entry into the $25 billion eSignature market. The new feature speeds up the signature process by an estimated 80% and provides summaries and approval histories to users. This new tool is expected to strengthen Ironclad's position in the sell-side contract lifecycle management market.
Additionally, Ironclad introduced value-based pricing, charging only for completed, signed agreements, unlike other providers who charge for every signature packet sent out. Ironclad, backed by investors like Accel, Sequoia, Y Combinator, and BOND, remains committed to innovating and maintaining its leadership in the contract lifecycle management space.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jan 2022
$150m
SERIES E
Dec 2020
$100m
SERIES D
Total funding: $334.3m
Company benefits
- Dental, and vision insurance
- 401K
- Wellness reimbursement
- Flexible vacation policy
- Generous parental leave for both primary and secondary caregivers
- Work from home opportunities
- Health insurance
Company HQ
South Beach, San Francisco, CA
Leadership
Cai GoGwilt
(Co-Founder & Chief Architect)Studied HSPS at Cambridge, and Computer Science at MIT. Was a Summer Technology Analayst at Goldman Sachs. Worked as a Research Assistant at MIT. Was a Software Engineer at Palantir.
Jason Boehmig
(Co-Founder & Executive Chairman)Former Corporate Lawyer at Fenwick and Professor of Law at the University of Notre Dame before founding Ironclad in 2014.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 41 more jobs at Ironclad