This job is closed
Applications are no longer available for this announcement. Explore current related opportunities below.
Job description
Senior Identity & Access Management (IAM) Engineer
About Valar Atomics
At Valar Atomics, we're redefining what's possible in energy. Our mission is to make clean, high-temperature nuclear power scalable—unlocking abundant energy for industry, hydrogen, and next-generation manufacturing. We are a team of builders, engineers, and operators who believe nuclear energy should be fast to deploy, factory-made, and built for the real world. Our first pilot plant in Orangeville, Utah will demonstrate how advanced nuclear systems and fuel fabrication can power the future. Joining Valar Atomics means becoming part of a company where autonomy, ownership, and impact exist at every level.
The Team
As part of the Business organization, IT & Enterprise Software delivers the technology infrastructure, enterprise applications, and digital tools that power Valar's operations. The team ensures secure, reliable, and scalable technology solutions that support every function across the company.
The Role
We are seeking a Senior IAM Engineer to own the design, integration, and governance of identity and access management across our enterprise, with Microsoft Entra ID as the central identity platform. This role is responsible for provisioning and deprovisioning automation (SCIM), single sign-on (SSO) integrations across SaaS and cloud platforms, and mapping application-specific roles and permissions — including Palantir Foundry andPolarion— to Entra security groups to drive automated, role- and department-based license and access management. The ideal candidate has deep hands-on experience with Entra ID, AWS IAM, and enterprise application integration.
Key Responsibilities
Own end-to-end access management strategy and governance across the organization, with Microsoft Entra ID as the identity backbone.
Design and implement SCIM-based user provisioning/deprovisioning integrations between Entra ID and downstream SaaS applications.
Configure and maintain SSO integrations (SAML/OIDC) between Entra ID and enterprise SaaS platforms, ensuring secure and reliable authentication.
Design and manage the mapping of Palantir Foundry roles and permissions to Entra ID security groups, enabling automated and auditable accessassignment.
Design and manage the mapping ofPolarionroles and permissions to Entra ID groups to automate license assignment and access by role and department.
Build automated workflows that assign or revoke SaaS licenses based on Entra group membership, role, and department attributes.
Configure and manage AWS IAM roles, policies, and identity federation, including SSO integration between AWS and Entra ID.
Implement andmaintainconditional access policies, MFA, and least-privilege access controls across integrated platforms.
Partner with application owners and business stakeholders to define role-based access control (RBAC) models and access request/approval workflows.
Conduct periodic access reviews, certifications, and audits to ensure compliance with internal governance and regulatory requirements.
Troubleshoot identity, SSO, and provisioning issues across integrated platforms, and drive root-cause resolution.
Document IAM architecture, integration patterns, and standard operating procedures for access governance.
Stay current on Entra ID, AWS IAM, and identitygovernanceroadmap changes, and assess impact on existing integrations.
Basic Qualifications
5+ years of hands-on experience in Identity & Access Management, with deepexpertisein Microsoft Entra ID (Azure AD).
Strong experience implementing SCIM-based/APIprovisioning/deprovisioning integrations between Entra ID and SaaS applications.
Strong experience configuring SSO (SAML/OIDC) integrations between Entra ID and enterprise/SaaS platforms.
Experience mapping application roles and permissions (e.g., Palantir Foundry,Polarion, or similar enterprise platforms) to Entra ID security groups.
Experience automating license assignment/management based on role, group, or department attributes.
Hands-on experience with AWS IAM, including roles, policies, and SSO/identity federation between AWS and Entra ID.
Solid understanding of RBAC design, least-privilege principles, and access governance best practices.
Strong troubleshooting skills across identity, authentication, and provisioning integrations.
Excellent communication skills, with the ability to work directly with application owners and business stakeholders on access requirements.
Preferred Skills and Experience
Experience with Palantir Foundry administration or platform governance.
Experience withPolarionadministration or ALM platform governance.
Familiarity with identity governance tools (Entra ID Governance, SailPoint, Saviynt, or similar).
Experience with scripting/automation (PowerShell, Microsoft Graph API, or AWS CLI/SDKs) for identity workflows.
Microsoft certifications such as SC-300 (Identity and Access Administrator) or AWS Certified Security – Specialty.
What We Offer
Equity ownership in a rapidly growing advanced energy company
Unlimited PTO
Free daily lunch and dinner provided onsite
Generous PPE stipend
High-impact startup environment with significant ownership and autonomy
Opportunities for rapid career growth and internal advancement
Direct collaboration with experienced operators, engineers, and industry leaders
The opportunity to help build and scale transformative energy technology from the ground up
Equal Employment Opportunity Statement
Valar Atomics is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other protected status under applicable law.
We are committed to providing a workplace free of discrimination and harassment and will provide reasonable accommodation as required by law.
Applicants must be legally authorized to work in the United States as a U.S. citizen or lawful permanent resident (green card holder).
$165,000 - $185,000 USD
#J-18808-Ljbffr
Worksite address
torrance, CA, 90504, US
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.