SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 120,000 - 180,000 / annual
Panthalassa is a renewable energy and ocean technology company developing devices that capture ultra-low-cost renewable energy from the ocean for computing and renewable fuel applications. The company is a public benefit corporation backed by leading venture capitalists and philanthropic investors, headquartered in Portland, Oregon.
You will own the identity and access management (IAM) infrastructure at Panthalassa, serving as the control point for who gets access to what, on which device, from where, and for how long. This is a high-ownership individual contributor role with significant autonomy and impact.
Key responsibilities include:
**Identity Infrastructure:** Administer Microsoft Entra ID including user lifecycle, group management, dynamic membership rules, and role assignment. Design and maintain Conditional Access policies that tie device compliance posture, identity signals, risk, and location to resource access. Own authentication standards including MFA, phishing-resistant methods, passwordless rollout, and legacy auth retirement. Partner with the Endpoint Engineer to keep access policy and device posture in sync.
**Access Automation and Lifecycle:** Automate joiner, mover, and leaver processes so access is granted and revoked from a source of truth. Manage SSO integrations and application provisioning via SAML and SCIM across the SaaS stack. Build and run access review and recertification cycles that produce audit-acceptable evidence. Implement least privilege for privileged roles, including just-in-time elevation and break-glass procedures.
**Non-Human Identity and Governance:** Govern service accounts, OAuth grants, and API credentials including naming conventions, ownership, scope review, and rotation. Establish where secrets live and how they are issued, stored, and retired. Maintain a defensible inventory of who and what can reach company systems.
**Security and Compliance:** Advance the zero trust roadmap and translate policy into enforceable technical controls. Own the access control domain of the compliance framework (NIST or equivalent), including documentation and evidence. Partner with information security leadership on access control policy, identity threat detection, and incident response involving compromised accounts.
The role requires strong interpersonal skills and the ability to thrive in a creative, scrappy, collaborative environment where the best ideas change the company's direction regularly. You will need to explain access decisions and security reasoning to non-technical audiences and secure buy-in.
**Requirements:**
- Experience administering identity and access in a modern IdP, including user lifecycle, groups, and conditional or context-aware access
- Experience implementing SSO and provisioning integrations (SAML, SCIM) across a SaaS stack
- Automation experience: scripting or API work against identity and SaaS platforms rather than console-only administration
- Ability to write clear documentation and turn written policy into enforceable technical controls
- Ability to explain access decisions to non-technical audiences and secure buy-in
**Desired Qualifications:**
- Experience owning an IdP at a growing technology company
- Familiarity with zero trust architecture and how it translates into identity controls
- Experience with identity governance and administration: access reviews, entitlement management, and privileged access
- Experience governing non-human identities, service accounts, and OAuth scopes
- Experience supporting or implementing a security or compliance framework (NIST, ISO 27001, SOC 2, or equivalent)
- Experience with identity threat detection and response, or investigating account compromise
**Additional Requirements:**
- Available for occasional off-hours work to support identity migrations, tenant changes, and access cutovers
- Participate in incident response when accounts or credentials are involved, including outside business hours
- Travel to Portland office quarterly if working remotely
- Intermittently able to work longer hours to support critical needs
