IAM Engineer

xAI is hiring an IAM Engineer in Palo Alto, Austin and New York, United States. It pays $100k-$258k a year and Level rates it ; you can apply on xAI.

Level's read on this job

Level rates this role Little AI ●○○○: aI is not part of the work.
The posting mentions Sailpoint, Okta and Pingone among its tools and skills.
Level classes it as a senior role.
xAI has 304 other open roles on Level.

AI in this role

Design, implement, and manage enterprise Identity and Access Management (IAM) systems and security infrastructure.

sailpointoktapingoneentra-idterraformsamloidcoauth2

iamsecurityidentity-managementaccess-control

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars.

SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next.

ABOUT THE ROLE:

We are looking for an Identity and Access Management (IAM) Engineer to play a critical role in designing, implementing, and maturing our enterprise IAM ecosystem. As a Senior IAM Engineer, you will serve as a key subject matter expert (SME) within the broader Information Security organization, driving secure, scalable, and user-friendly identity solutions in a fast-paced, high-growth environment. You will own complex IAM initiatives end-to-end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams. This is a high-impact, hands-on role suited for someone who thrives in ambiguity and takes extreme ownership of outcomes.

RESPONSIBILITIES:

Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments.
Architect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM).
Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools.
Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives.
Develop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiency.
Serve as the primary IAM SME, providing technical guidance, troubleshooting complex issues, and mentoring other team members.
Work closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
Continuously improve IAM architecture, processes, and capabilities in a dynamic, fast-moving organization.
Support cloud IAM strategies across AWS, GCP, and other platforms.
Participate in on-call rotation and incident response related to identity systems.

BASIC QUALIFICATIONS:

3+ years of hands-on experience in Identity and Access Management.
Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
Strong expertise in IAM and federation protocols, with proven experience in architecting and implementing end-to-end federation solutions.
Hands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions.
Strong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practices.
Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations.
Demonstrated ability to lead technical initiatives and drive projects from design through implementation.

This high-visibility role requires the ability to thrive in a fast-paced and ambiguous environment. The ideal candidate demonstrates extreme ownership, a collaborative no-ego mindset, and is comfortable taking the lead. This is a significant opportunity to shape the future of identity and security at the company.

COMPENSATION AND BENEFITS

$100,000 - $258,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

How we rate this

IAM Engineer at xAI rates 20 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

IAM Engineer is an open job at xAI.
Level rates this role AI Level 1 of 4: Little AI.
The listed salary is $100k-$258k a year.
The role is based in Palo Alto, CA; Austin, TX; New York, NY; Washington, DC.
The job was posted on July 6, 2026.
Seniority: senior.
Applications are handled by xAI. Apply on xAI

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

IamSecurityIdentity ManagementAccess ControlSailpointOktaPingoneEntra Id

Questions you could be asked

Tell me about a project where iam was part of your work. What did you do?
Tell me about a project where security was part of your work. What did you do?
Tell me about a project where identity management was part of your work. What did you do?
Tell me about a project where access control was part of your work. What did you do?
Walk me through how you've used Sailpoint in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Iam, Security, Identity Management, Access Control, and Sailpoint. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review Check your resume with the ATS resume checker