Enterprise Security Engineer

Who We Are At Pave, we're building the industry’s leading compensation platform, combining the world's largest real-time compensation dataset with deep expertise in AI and machine learning. Our platform is perfecting the art and science of pay to give 8,500+ companies unparalleled confidence in every compensation decision. Top tier companies like OpenAI, McDonald’s, Instacart, Atlassian, Synopsys, Stripe, Databricks, and Waymo use Pave, transforming every pay decision into a competitive advantage. $190+ billion in total compensation spend is managed in our workflows, and 80% of Forbes AI 50 use Pave to benchmark compensation. The future of pay is real-time & predictive, and we’re making it happen right now. We’ve raised $160M in funding from leading investors like Andreessen Horowitz, Index Ventures, Y Combinator, Bessemer Venture Partners, and Craft Ventures. The Security Team @ Pave Security at Pave protects the world's largest real-time compensation dataset and the company that runs on it. The team is small, senior, and AI pilled: everyone builds, everyone automates, and everyone flexes across domains. As Pave's Corporate Security Engineer, you'll own the corporate side of that mission: identity and access management, endpoint protection, SaaS security, and the corporate compliance operations behind our SOC 2 Type II and ISO 27001 programs, with an explicit charter to aggressively automate all the things. What You'll Do Identity & Access Management Own Okta and Pave's access-management model: role/group architecture, lifecycle automation, SSO/SCIM, and the exception process Keep the RBAC model current and consistently enforced, with automation that prevents drift Compliance Operations Own the SOC 2 Type II and ISO 27001 controls that touch corporate IT, end to end Automate evidence collection and user access reviews Endpoint & SaaS Security Own endpoint protection (MDM/EDR) across a five-location, ~175-person company Run SaaS vendor security reviews and build shadow-IT visibility; feed IT-controlled data sources into our SIEM Automation & AI Engineer away manual IT toil — laptop setup, onboarding/offboarding provisioning, access requests — using APIs, workflow tooling, and AI agents Build governance for employee-built internal apps: publish detection, automated review checks, sane sharing models Partnership Design the systems that Pave's helpdesk (in G&A) operates day to day; be the design counterpart that makes that team stronger and more self-sufficient What You'll Bring 5+ years of hands-on corporate/enterprise security or IT security engineering experience at a multi-office company Okta (or equivalent IdP) administration at the design level — you've built an access model, not just operated one Experience operating within SOC 2 and/or ISO 27001: controls you owned passed audits Hands-on MDM/EDR and Google Workspace–class SaaS estate administration as a primary owner A track record of shipped automations with concrete before/after impact Demonstrated, specific use of AI tooling in your own workflows Previous management experience (nice to have) Came up through IT/helpdesk into security (or similar path), so you have empathy for the people you’re supporting and first hand experience with the toil you’re here to automate away Experience with Okta, GCP, Iru, Sentinel one, Claude code, and or similar tools Vendor security review / third-party risk experience (nice to have) Background at a 150–500 person B2B SaaS company handling sensitive data (nice to have) Networking fundamentals Compensation, It's What We Do. At Pave, we believe compensation should be as thoughtful as the people we hire. Your total rewards package includes meaningful equity, best-in-class medical, dental, and vision coverage, unlimited PTO, and region-specific benefits designed around your life — not just your role. Your level and compensation are determined by your experience and how you show up throughout the interview process. We're always happy to wal…