Your space-enabled career begins here

Identity Engineer

Remote - US

About Intuitive Machines:

Intuitive Machines is an innovative and cutting-edge space company making cislunar space accessible to both public and private customers. Our mission is to further science and exploration, communications, and economic progress from the Earth to the Moon and beyond. With multiple NASA lunar missions in development and additional private missions on our manifest, we pride ourselves in supporting NASA, our customers, and the nation in paving the way to return humans to the surface of the Moon. Our world-class team includes experts in all aspects of spacecraft subsystems design, development, and test, on-orbit operations, and safety.

About the Position: Intuitive Machines is seeking an experienced Identity and Access Management (IAM) Engineer to lead the transition and ongoing management of our enterprise IAM program. This role can be based remotely in the US. This position will play a pivotal role as we shift responsibility from our sister company's managed services to an in-house IAM team. The ideal candidate will be responsible for creating transition plans, implementing integrations, and performing configuration and administration across our identity ecosystem.

We're looking for a hands-on expert who can establish IAM operational standards, optimize directory services, manage access lifecycles, ensure cloud security, and maintain compliance with regulatory frameworks. If you have deep expertise in Active Directory, Entra ID/Azure AD, and cloud IAM technologies, with a strong background in governance and automation, we want to hear from you.

Responsibilities:

Program Transition and Ownership

• Lead the in-sourcing and knowledge transfer process from the current managed service provider.
• Establish IAM operational standards, processes, and documentation for internal management.
• Design and implement IAM governance aligned with corporate cybersecurity and compliance frameworks.

Identity Platform Administration

• Administer and optimize Active Directory (AD), Azure AD / Entra ID, LDAP, and Group Policy Objects (GPOs).
• Manage domain join policies, trust relationships, and directory synchronization.
• Configure and maintain Multi-Factor Authentication (MFA), conditional access, and passwordless authentication mechanisms.

Access Lifecycle Management

• Oversee user provisioning, deprovisioning, and access reviews across enterprise systems (cloud, on-prem, SaaS).
• Integrate IAM with HR and ITSM systems for automated identity lifecycle workflows.
• Define and enforce least-privilege access and role-based access control (RBAC) models.

Cloud and Application Security

• Manage IAM integrations with AWS IAM, Azure, and SaaS applications using SAML, OIDC, and OAuth.
• Ensure consistency of IAM policies across hybrid and multi-cloud environments.
• Work closely with enterprise architects to design secure authentication and authorization patterns.

Monitoring and Continuous Improvement

• Implement IAM-related threat detection and auditing processes.
• Maintain compliance with regulatory frameworks (e.g., NIST 800-53, NIST 800-171, CMMC, ISO 27001).
• Continually evaluate IAM solutions for modernization, automation, and risk reduction.

General Requirements:

• Must be a US Citizen or US Permanent Resident
• Bachelor's Degree in the following area(s): Computer Science, Cybersecurity, or related field. Four additional years of experience may be substituted for a degree
• Minimum of 8 years of hands-on experience in IAM engineering or architecture roles.
• Experience with Active Directory, Entra ID/Azure AD, LDAP, MFA, and SSO technologies.
• Experience in cloud IAM (AWS, Azure, GCP) and federated identity management.
• Experience integrating identity platforms with SaaS and on-premises applications.
• Experience with identity governance and administration (IGA) tools and best practices.
• Experience in scripting languages (e.g., PowerShell, Python) for IAM automation.

Preferred Qualifications:

• Professional certifications such as CISSP, Microsoft Certified: Identity and Access Administrator Associate, AWS Certified Security – Specialty, or similar.
• Experience implementing or managing IAM components within regulated or DoD/CMMC environments.
• Strong collaboration skills and ability to guide cross-functional teams through complex IAM transitions.

US EEO Statement:

Intuitive Machines is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.