Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 17 hours ago

IT IAM Engineer

Panthalassa45 open roles

Where
Portland, OR
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT IAM EngineerPanthalassa · Portland, OR

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Panthalassa's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. Panthalassa postings stay open a median of 32 days.

Share of postings closed within
  1. 1.7%1 day
  2. 3.6%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 34.0%30 days
This job: posted 17 hours ago

Panthalassa median: 32 days open

The posting

About the Company

We are a renewable energy and ocean technology company committed to rapidly developing and deploying technologies that will ensure a sustainable future for Earth by unlocking the vast energy potential of its oceans. Our focus is on capturing civilizational levels of ultra-low-cost renewable energy for applications including computing and affordable renewable fuels delivered to shore.

The company is a public benefit corporation headquartered in Portland, Oregon, and backed by leading venture capitalists, philanthropic investors, university endowments, and private investment offices. We operate as an idea meritocracy in which the best ideas change the company’s direction on a regular basis.

Our staff have worked at organizations such as SpaceX, Blue Origin, Boeing, Tesla, Apple, Virgin Orbit, Astra, Google, Amazon, Microsoft, New Relic, Bridgewater, Raytheon, Disney Imagineering, and the US Army and Air Force, as well as research universities, startups, and small companies across a range of industries.

About the Job

Our core technology is the node, a device that produces energy in the ocean’s harshest conditions for years at a time without human maintenance or intervention.

We're looking for an IAM Engineer to own the identity plane at Panthalassa. Identity is the control point for everything we do: who gets access to what, on which device, from where, and for how long. You'll build that system and the automation behind it.

This is a high-ownership individual contributor role. You'll administer Microsoft Entra ID and Google Workspace identity, design Conditional Access and context-aware policy, automate joiner/mover/leaver, and bring every SaaS application in our stack under SSO and automated provisioning. You'll also help govern the identities that aren't people: service accounts, OAuth grants, and workload credentials. We have an established zero trust roadmap and a security framework to comply with, and your job is to turn both into enforceable technical controls and explain the reasoning well enough that the rest of the company comes along with you.

Candidates should have strong interpersonal skills and be able to thrive in a creative, scrappy, and collaborative environment in which the best ideas change the company’s direction on a regular basis.

Responsibilities

Identity Infrastructure

  • Administer Microsoft Entra ID, including user lifecycle, group management, dynamic membership rules, and role assignment.
  • Design and maintain Conditional Access policy, tying device compliance posture, identity signals, risk, and location to resource access.
  • Own authentication standards: MFA, phishing-resistant methods, passwordless rollout, and legacy auth retirement.
  • Partner with our Endpoint Engineer so access policy and device posture stay in sync.

Access Automation and Lifecycle

  • Automate joiner, mover, and leaver so access is granted and revoked from a source of truth rather than a ticket.
  • Manage SSO integrations and application provisioning via SAML and SCIM across our SaaS stack.
  • Build and run access review and recertification cycles that produce evidence auditors accept.
  • Implement least privilege for privileged roles, including just-in-time elevation and break-glass procedures.

Non-Human Identity and Governance

  • Govern service accounts, OAuth grants, and API credentials: naming conventions, ownership, scope review, and rotation.
  • Establish where secrets live and how they are issued, stored, and retired.
  • Maintain a defensible inventory of who and what can reach our systems.

Security and Compliance

  • Advance our zero trust roadmap and translate policy into enforceable technical controls.
  • Own the access control domain of our compliance framework (NIST or equivalent), including documentation and evidence.
  • Partner with information security leadership on access control policy, identity threat detection, and incident response involving compromised accounts.

Required Qualifications

  • Experience administering identity and access in a modern IdP, including user lifecycle, groups, and conditional or context-aware access.
  • Experience implementing SSO and provisioning integrations (SAML, SCIM) across a SaaS stack.
  • Automation experience: scripting or API work against identity and SaaS platforms rather than console-only administration.
  • Ability to write clear documentation and turn written policy into enforceable technical controls.
  • Ability to explain the reasoning behind an access decision to a non-technical audience and get buy-in.

Desired Qualifications

  • Experience owning an IdP at a growing technology company.
  • Familiarity with zero trust architecture and how it translates into identity controls.
  • Experience with identity governance and administration: access reviews, entitlement management, and privileged access.
  • Experience governing non-human identities, service accounts, and OAuth scopes.
  • Experience supporting or implementing a security or compliance framework (NIST, ISO 27001, SOC 2, or equivalent).
  • Experience with identity threat detection and response, or investigating account compromise.

The above qualifications are desired, not required. We encourage you to apply if you are a strong candidate with only some of the desired skills and experience listed.

Additional Requirements

  • Available for occasional off-hours work to support identity migrations, tenant changes, and access cutovers that have to land outside business hours.
  • Participate in incident response when accounts or credentials are involved, including outside business hours.
  • Travel to the Portland office quarterly if working remotely.
  • Intermittently able to work longer hours to support critical needs. While we expect a lot of each other, we also offer a high degree of autonomy and work-life balance, including flexible PTO and flexible working hours.

Compensation and Benefits

If hired for this full-time role, you will receive:

  • Cash compensation of $120,000 - $180,000.
  • Equity in the company. We’re all owners and if we’re successful, this equity should be far and away the most valuable component of your compensation.
  • A benefits package that helps you take care of yourself and your family, including: Flexible paid time off Health insurance (the company pays 100% of gold-level PPO plan for full-time employees, their partners, and dependents) Dental insurance (the company pays 100% for full-time employees, their partners, and dependents) Vision insurance (the company pays 100% for full-time employees, their partners, and dependents) Disability insurance (the company pays 100% for a policy to provide long-term financial support if you become disabled) Ability to contribute to tax-advantaged accounts, including 401(k), health FSA, and dependent care FSA
  • Relocation assistance to facilitate your move to Portland (if needed).

Location

This is an on-site position. Our offices, lab, and shop are located in Portland, Oregon.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Panthalassa's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Panthalassa's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Panthalassa's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.