What You'll Be Doing- Identity & Access Management
- Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process
- Keep the RBAC model current and consistently enforced, with automation that prevents drift
- Compliance Operations
- Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end
- Automate evidence collection and user access reviews
- Endpoint & SaaS Security
- Own endpoint protection (MDM/EDR) across a five-location, ~175-person company
- Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM
- Automation & AI
- Engineer away manual IT toil - laptop setup, onboarding/offboarding provisioning, access requests - using APIs, workflow tooling, and AI agents
- Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models
- Partnership
- Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient
What You'll Bring- Required Qualifications
- 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company
- Okta (or equivalent IdP) administration at the design level - you've built an access model, not just operated one
- Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits
- Hands-on MDM/EDR and Google Workspace-class SaaS estate administration as a primary owner
- A track record of shipped automations with concrete before/after impact
- Demonstrated, specific use of AI tooling in your own workflows
- Preferred Qualifications
- Previous management experience
- Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you're supporting and first hand experience with the toil you're here to automate away
- Experience with Okta, GCP, Iru, Sentinel one, Claude code
- Vendor security review / third-party risk experience
- Background at a 150-500 person B2B SaaS company handling sensitive data
- Networking fundamentals
Compensation, It's What We Do.At Pave, we believe compensation should be as thoughtful as the people we hire. Your total rewards package includes meaningful equity, best-in-class medical, dental, and vision coverage, unlimited PTO, and region-specific benefits designed around your life - not just your role. Your level and compensation are determined by your experience and how you show up throughout the interview process. We're always happy to walk you through how we think about leveling - just ask.
The targeted cash compensation for this position is (level depends on experience and performance in the interview process):Compensation: $220,000+(base) and Equity
Benefits @ PaveAt Pave, growth isn't a perk - it's the point. As you develop, your role expands, your responsibilities deepen, and your compensation reflects the impact you're making.
What we offer:- Your Health, Fully Covered: Comprehensive medical, dental, and vision coverage for you and your family, with a range of options designed to meet you where you are.
- Time That's Actually Yours: Flexible PTO and the freedom to work from anywhere in the world for up to a month - because life doesn't pause, and neither should you.
- Fuel for the Work: Lunch and dinner stipends plus fully stocked kitchens, so you can stay energized without thinking twice about it.
- Room to Keep Growing: A quarterly education stipend to invest in the skills and knowledge that matter most to you.
- Support When It Matters Most: Robust parental leave so you can be fully present for the moments that count.
- Getting Here, Made Easier: A commuter stipend to support the in-person collaboration that makes great work happen.
