[Remote] Senior Corporate Engineer II

Note: The job is a remote job and is open to candidates in USA. Instacart is transforming the grocery industry by providing essential services to customers while offering flexible earnings opportunities to Personal Shoppers. They are seeking a Senior Corporate Engineer II to manage and enhance their security-critical workforce platforms, ensuring seamless and secure access for employees. This role involves collaboration across various teams to improve operational reliability and implement security measures.ResponsibilitiesOwn the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trustDesign and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioningArchitect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner managementLead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change managementStandardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditabilityPartner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizingMentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environmentSkills7+ years of experience in corporate IT engineering or a related field with a focus on identity and access management (IAM) and enterprise networking3+ years of hands-on administration of Okta in production (1,000+ users), including SSO integrations (SAML/OIDC), SCIM provisioning, MFA, and policy design2+ years implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or an equivalent IGA platformProficiency with Infrastructure-as-Code and automation: Terraform (required) and at least one scripting language (Python, Bash, or PowerShell)Demonstrated experience planning and executing certificate rotations and key management for SAML/TLS across multiple SaaS applicationsHands-on experience operating and troubleshooting office network infrastructure (switching, routing, wireless, firewalls) and VPN/zero-trust access using technologies such as Cisco/Meraki, Aruba, and Palo AltoProven track record leading critical incidents and executing structured change management, including authoring runbooks and conducting post-incident reviewsWorking knowledge of endpoint management and device trust (e.g., Jamf, Kandji, Intune) and integrating device posture into access controlsBachelor's degree in Computer Science, Engineering, Information Systems, or equivalent practical experienceLocated in Pacific or Mountain time zone requiredOkta certifications (Administrator, Professional, or Consultant) and/or networking/security certifications (e.g., CCNP, PCNSE)Experience building Git-based CI/CD pipelines for identity and network automation (e.g., GitHub Actions, CircleCI) and implementing policy-as-codeFamiliarity with compliance frameworks and audits (SOX, SOC 2, ISO 27001) and hands-on experience running access reviews and evidence collectionExperience administering Google Workspace and/or Microsoft 365 identity and security configurations at scaleExposure to secrets management and PKI (e.g., HashiCorp Vault, AWS KMS) and log/monitoring platforms (e.g., Datadog, Splunk)Strong cross-functional communication skills and experience leading complex, multi-stakeholder projects from scoping through deliveryBenefitsInstacart is a Flex First teamFlexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shopRegular in-person eventsNew hire equity grant as well as annual refresh grantsCompany OverviewInstacart is an online grocery platform that offers same-day delivery and pickup services for retailers and consumers. It was founded in 2012, and is headquartered in San Francisco, California, USA, with a workforce of 1001-5000 employees. Its website is https://www.instacart.com.Company H1B SponsorshipInstacart has a track record of offering H1B sponsorships, with 23 in 2026, 152 in 2025, 173 in 2024, 109 in 2023, 159 in 2022, 170 in 2021, 59 in 2020. Please note that this does not guarantee sponsorship for this specific role.