Identity and Endpoint Security Engineer

<h1> Identity & Endpoint Security Engineer</h1><p><strong>Department:</strong> Information Technology</p><p><strong>Location:</strong> Torrance, CA</p><p><strong>Compensation:</strong> $120K – $190K</p><p><strong>Employment Type:</strong> FullTime</p><p>Northwood is a modern space infrastructure company bringing the benefits of space to the masses through advanced communications technology. We are building a global network of phased array ground stations that enable real-time, reliable communication for satellite missions such as national security, global connectivity, and disaster response. With a vertically integrated approach, Northwood designs, builds, and rapidly deploys scalable systems that power the next generation of space missions. If you like solving complex challenges and seeing your work deployed around the world with real impact, Northwood is the place to do it.</p><p></p><p><strong>Role:</strong></p><p>As an Identity & Endpoint Security Engineer, you will own the design and implementation of Northwoods identity architecture, ensuring that access to corporate systems, cloud environments, and sensitive government workloads is governed by robust, auditable, and least-privilege controls. This is a mid-level individual contributor role for an engineer with deep Okta expertise and a strong foundation in IAM architecture, SSO, and role-based access control across complex hybrid environments.</p><p>You will serve as Northwoods IAM subject-matter expert, designing and maintaining the identity fabric that connects corporate users, contractors, and service accounts to the tools and systems they need — while enforcing the access boundaries required for CUI handling, ITAR compliance, and CMMC Level 2 certification. This role works in close partnership with the Security Engineering Lead, Security Operations Lead, and GRC Lead, and reports to the Head of Security.</p><p></p><p><strong>Responsibilities</strong></p><p><em>Identity Architecture & Okta Administration</em></p><ul><li><p>Own Northwoods Okta environment end-to-end, including tenant configuration, application integrations, lifecycle management, MFA policy enforcement, and directory synchronization.</p></li><li><p>Design and maintain Northwoods SSO architecture, ensuring all corporate and government-facing applications are integrated into a consistent, auditable authentication framework.</p></li><li><p>Develop and enforce adaptive authentication policies, step-up MFA configurations, and risk-based access controls aligned to the sensitivity of the systems being accessed.</p></li><li><p>Manage Okta workflows and automation to support user provisioning, deprovisioning, and access change processes across the employee and contractor lifecycle.</p></li><li><p>Maintain Okta system health, audit logging, and integration reliability, ensuring identity telemetry flows into Northwoods SIEM for continuous monitoring.</p></li></ul><p><em>RBAC & Access Governance</em></p><ul><li><p>Design and implement role-based access control frameworks across Northwoods corporate systems, cloud environments, and government workloads, ensuring access is granted on a least-privilege and need-to-know basis.</p></li><li><p>Define and maintain role taxonomies, access request workflows, and entitlement review processes that satisfy CMMC, FedRAMP, and NIST 800-171 access control requirements.</p></li><li><p>Conduct periodic access reviews and certification campaigns, working with system owners to validate that entitlements remain appropriate and revoke unnecessary access.</p></li><li><p>Develop and maintain access control documentation, including role definitions, provisioning procedures, and audit evidence required for compliance assessments.</p></li><li><p>Enforce segregation of duties controls across critical systems, identifying and remediating access conflicts that create compliance or operational risk.</p></li></ul><p><em><strong>MDM Management & Provisioning</strong></em></p><p>· <em>Architect, deploy, and manage a unified Mobile Device Management (MDM) solution across macOS, Windows, Linux, and iOS/Android endpoints, ensuring consistent security baselines and configuration compliance across all device types.</em></p><p>· <em>Establish and maintain OS-level hardening benchmarks (CIS, DISA STIG) across macOS, Windows, and Linux endpoints, translating requirements into enforced MDM policies and automated remediation workflows</em></p><p>· <em>Define and enforce MDM configuration profiles, compliance policies, and conditional access rules across all managed platforms in alignment with CMMC, NIST 800-53, and organizational security standards</em></p><p><em>SSO & Application Integration</em></p><ul><li><p>Lead SSO onboarding for new SaaS applications, internal tools, and government-facing platforms, ensuring integrations conform to Northwoods authentication standards and security policies.</p></li><li><p>Evaluate and enforce SAML, OIDC, and OAuth 2.0 implementation standards across integrated applications, identifying and remediating misconfigurations that introduce identity risk.</p></li><li><p>Partner with the Security Engineering Lead to ensure Okta log ingestion, anomaly detection, and identity-based alerting are functioning and continuously tuned within the SIEM environment.</p></li><li><p>Support integration of identity controls with endpoint management platforms, ensuring device trust policies are enforced as part of access decisions.</p></li></ul><p><em>Privileged Access & Secrets Management</em></p><ul><li><p>Design and maintain privileged access management controls for administrative accounts, service accounts, and break-glass access procedures across corporate and government environments.</p></li><li><p>Define and enforce service account governance standards, including credential rotation policies, least-privilege scoping, and audit logging requirements.</p></li><li><p>Collaborate with the Product Security Lead on secrets management integration with identity controls, ensuring service-to-service authentication conforms to zero-trust principles.</p></li></ul><p><em>Compliance & Cross-Functional Collaboration</em></p><ul><li><p>Ensure Northwoods IAM environment satisfies access control requirements across CMMC Level 2, FedRAMP, SOC 2, and ITAR, providing audit evidence and control documentation to the GRC Lead as needed.</p></li><li><p>Partner with the GRC Lead to support access control–related audit activities, including evidence collection, assessor walkthroughs, and remediation of identified deficiencies.</p></li><li><p>Collaborate with the network engineering team to ensure identity-aware network access controls and Zero Trust policies are consistently enforced across Cloudflare and on-premises environments.</p></li><li><p>Develop and maintain IAM architecture documentation, including data flow diagrams, integration maps, and access control matrices that reflect Northwoods current environment.</p></li></ul><p></p><p><strong>Basic Qualifications</strong></p><ul><li><p>3+ years of hands-on IAM engineering experience, with demonstrated ownership of Okta administration in a production environment.</p></li><li><p>Deep Okta expertise, including SSO configuration, lifecycle management, MFA policy enforcement, adaptive authentication, Okta Workflows, and SIEM log integration.</p></li><li><p>Strong understanding of SSO protocols including SAML 2.0, OIDC, and OAuth 2.0, with hands-on experience troubleshooting and hardening integrations.</p></li><li><p>Experience designing and implementing RBAC frameworks, including role taxonomy development, entitlement reviews, and access certification processes.</p></li><li><p>Familiarity with privileged access management concepts, including service account governance, least-privilege enforcement, and administrative access controls.</p></li><li><p>Understanding of IAM requirements within government compliance frameworks, including NIST 800-171 access control and identification and authentication control families.</p></li><li><p>Experience integrating identity platforms with endpoint management, cloud environments, and security monitoring tooling.</p></li><li><p>Ability to obtain and maintain a TS/SCI clearance.</p></li><li><p>U.S. citizenship or status as a lawful permanent resident required to conform with ITAR export regulations.</p></li></ul><p></p><p><strong>Preferred Qualifications</strong></p><ul><li><p>Active TS clearance or higher.</p></li><li><p>Experience operating Okta in AWS GovCloud or Microsoft GCC environments, including tenant configuration for government workload access controls.</p></li><li><p>Familiarity with Okta Identity Governance (OIG) or similar identity governance and administration (IGA) platforms.</p></li><li><p>Experience with Cloudflare Zero Trust access policies and integration with Okta for identity-aware network access enforcement.</p></li><li><p>Hands-on experience with privileged access management platforms such as CyberArk, BeyondTrust, or equivalent.</p></li><li><p>Background in aerospace, defense, critical infrastructure, or other government-adjacent regulated environments.</p></li><li><p>Experience supporting CMMC, FedRAMP, or SOC 2 audits in an IAM engineering capacity.</p></li><li><p>Okta Certified Administrator, Okta Certified Professional, or equivalent identity platform certification.</p></li><li><p>CISSP, CISM, or equivalent professional security certification.</p></li></ul><p></p><p><strong>Additional Requirements:</strong></p><ul><li><p>This position requires successfully obtaining and maintaining a Top Secret Security Clearance as a condition of employment. While the clearance may not be immediately necessary upon hire, we encourage you to initiate the application process promptly upon accepting this offer. Your ability to secure the necessary clearance is essential for fulfilling key responsibilities of the role. Should you be unable to obtain it, Northwood Space reserves the right to modify or terminate your employment to align with optional needs.</p></li></ul><p></p><p></p><p><strong>Additional Information:</strong></p><p>If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.</p><p></p><p><em>To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.</em></p><p></p><p>Northwood Space is an Equal Opportunity Employer; employment with Northwood Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.</p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...