Staff Systems Engineer, Identity

CoreWeave•Sunnyvale, CA

14h•$188,000 - $275,000•Hybrid

About The Position

As a Staff Systems Engineer, Identity, you will serve as the primary technical owner of CoreWeave’s enterprise identity ecosystem, with a focus on Okta and Opal. You will design, build, and operate identity lifecycle systems that are secure, automated, and scalable. This is a highly visible, high-impact role where identity sits at the center of security. You will define how access is granted, changed, and removed across the organization, enabling business velocity while enforcing least privilege and strong governance.

Requirements

7–10+ years of experience in IT systems engineering, identity engineering, or systems architecture
Deep hands-on experience with Okta in a complex enterprise environment
Strong expertise in identity and access concepts (SSO, MFA, SAML, OAuth, OIDC, SCIM, RBAC, Zero Trust)
Proven experience designing lifecycle automation (JML) and access governance frameworks
Experience with IGA or access request platforms such as Opal
Strong automation and infrastructure-as-code experience (Terraform, APIs, Python/PowerShell/Golang)
Ability to integrate enterprise applications into centralized identity platforms
Strong troubleshooting skills across identity, federation, and provisioning systems
Excellent communication skills with the ability to influence cross-functional stakeholders

Nice To Haves

Experience supporting compliance frameworks (SOC 2, ISO 27001, SOX, GDPR)
Familiarity with Active Directory, Entra ID, HRIS systems, and SaaS ecosystems
Experience building identity observability and reporting
Relevant certifications (Okta, cloud, or security)

Responsibilities

Design and scale enterprise identity architecture that minimizes access sprawl and enforces least privilege
Own and improve Joiner, Mover, and Leaver (JML) lifecycle processes across all critical systems
Build and operate identity governance and administration (IGA) capabilities including:
Birthright access models
Role-based access control (RBAC)
Approval workflows and policy enforcement
Access reviews and certification processes
Administer and enhance Okta capabilities (SSO, MFA, adaptive policies, lifecycle management, SCIM, integrations)
Build and scale access request workflows in Opal and integrated systems
Integrate new applications into the identity ecosystem (SAML, OIDC, SCIM, role mapping)
Develop automation and infrastructure-as-code to improve reliability and reduce manual effort
Partner with Security to strengthen identity as a core control plane (Zero Trust, authentication, authorization)
Align identity systems with PeopleOps and organizational changes
Monitor and improve identity system health, observability, and performance
Troubleshoot complex authentication, provisioning, and authorization issues
Maintain documentation, runbooks, and architectural standards
Serve as an escalation point for identity-related incidents
Drive continuous improvement in identity architecture, governance, and user experience