---
title: 'Staff IAM Engineer at Ironclad'
canonical: 'https://feeny.ai/job/staff-iam-engineer-ironclad-san-francisco-ka23s4ctrep5'
type: 'job'
last_seen: '2026-09-10'
---

# Staff IAM Engineer at Ironclad

- **Company:** Ironclad
- **Location:** San Francisco, CA
- **Compensation:** $160k–$190k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-04
- **Last confirmed live:** 2026-09-10
- **Apply:** https://jobs.ashbyhq.com/ironcladhq/f55e6b4f-6b18-44c4-b8e3-30814365c1c0/application

**Skills:** SAML 2.0, OIDC, SCIM, LDAP, OAuth, X.509, Okta, Active Directory, Google Workspace, RBAC, Python, Go, Terraform, GAM scripting, Powershell scripting, JSON, Javascript, macOS, Windows, Salesforce

> Own security-critical identity and corporate security controls, including IGA, RBAC, and SSO/MFA integration. Collaborate cross-functionally to ensure appropriate access, device trust, and audit compliance while maintaining a positive employee experience.

## Job description

Ironclad is the leading AI contracting platform that transforms agreements into assets. Contracts move faster, insights surface instantly, and agents push work forward, all with you in control. Whether you’re buying or selling, Ironclad unifies the entire process on one intelligent platform, providing leaders with the visibility they need to stay one step ahead. That’s why the world’s most transformative organizations, from Rivian to the World Health Organization and the Associated Press, trust Ironclad to accelerate their business.

We’re consistently recognized as a leader in the industry: a Leader in the Forrester Wave and Gartner Magic Quadrant for Contract Lifecycle Management, a Fortune Great Place to Work, and one of Fast Company’s Most Innovative Workplaces. Ironclad has also been named to Forbes’ AI 50 and Business Insider’s list of Companies to Bet Your Career On. We’re backed by leading investors including Accel, Y Combinator, Sequoia, BOND, and Franklin Templeton. For more information, visit [www.ironcladapp.com](http://www.ironcladapp.com) or follow us on LinkedIn.

This is a hybrid role. Office attendance is required at least twice a week on Tuesdays and Thursdays for collaboration and connection. There may be additional in-office days for team or company events.

Identity & Corporate Security Engineering @ Ironclad In this role, you’ll own security-critical identity and corporate security controls that protect Ironclad’s people, systems, and data. You’ll work cross-functionally with IT & Business Systems, Security Detection & Response, Trust & Compliance, and application owners to ensure access is appropriate, devices are trusted, and audit and monitoring requirements are met without sacrificing a great employee experience. At Ironclad, we’ve built a product that brings a two thousand year old profession into the digital age, and you’ll play a pivotal role in enabling secure, scalable operations. We work in a highly collaborative environment and strive to foster a positive, inclusive culture. If you’d like to join us on our mission to build the product that legal teams love, let’s talk!

What you will do:

- Support implementation and operations of our Identity Governance & Administration (IGA) platform to ensure employees gain appropriate access for their role, approvals are captured, and access is revoked efficiently upon separation
- Access control design as a security control by defining and enforcing RBAC standards for sensitive systems
- Continuous improvement of identity controls by reducing standing privileges and hardening authentication policies (SSO, MFA)
- Lead the integration of new SaaS applications into our SSO (Single Sign-On) and MFA (Multi-Factor Authentication) ecosystem, providing security oversight for business systems implementations and operations
- Evolve our corporate device trust program so only compliant devices can access corporate and production systems
- Support endpoint security efforts including security policies, controls, and vulnerability management across macOS and Windows
- Partner with Security Detection & Response to ensure visibility into corporate systems, including development of scripts and integrations as needed
- Partner with Trust & Compliance to streamline or automate evidence collection to support internal and independent audits (e.g., SOC2)
- Conduct periodic access reviews and audits; investigate and resolve identity- and access-related security incidents
- Design, document, and execute plans to identify gaps and continuously improve access management lifecycle and identity architecture

What we are looking for:

- 4+ years of experience in security-focused software engineering, corporate engineering, IT, and/or program management
- Demonstrated ability to identify risks and vulnerabilities in IT and business systems, balance risk with company priorities, and communicate risk to stakeholders
- Strong understanding of IAM protocols and standards, including SAML 2.0, OIDC, SCIM, LDAP, OAuth, and familiarity with X.509
- Experience with IdP and identity tooling (e.g., Okta, Active Directory, Google Workspace), including defining and enforcing Role-Based Access Control (RBAC) policies and Least Privilege principles across enterprise applications
- Familiarity with endpoint engineering for macOS and Windows
- SW Eng/Dev engineering and DevOps proficiency: Python and/or Go, Terraform, GAM scripting, Powershell scripting, JSON, Javascript
- Demonstrated experience deploying new IT systems and processes across the organization with high user satisfaction
- Strong analytical and problem-solving skills, attention to detail, and ability to operate independently with a high level of ownership
- Experience with Okta, Salesforce, NetSuite, Workday, GCP, GWP, Microsoft Entra/Azure/Intune, JAMF
- Backend and API testing/experience is a plus

Base Salary Range: $160,000 - $190,000 The base salary range represents the minimum and maximum of the salary range for this position based at our San Francisco headquarters. The actual base salary offered for this position will depend on numerous factors, including individual proficiency, anticipated performance, and the location of the selected candidate. Our base salary is just one component of Ironclad’s competitive total rewards package, which also includes equity awards (a new hire grant, along with opportunities for additional awards throughout your tenure), competitive health and wellness benefits, and a commitment to career growth and development.

US Full-Time Employee Benefits at Ironclad:

- 100% health coverage for employees (medical, dental, and vision), and 75% coverage for dependents with buy-up plan options available
- Market-leading leave policies, including gender-neutral parental leave and compassionate leave
- Family forming support through Maven for you and your partner
- Paid time off - take the time you need, when you need it
- Monthly stipends for wellbeing, hybrid work, and (if applicable) cell phone use
- Mental health support through Modern Health, including therapy, coaching, and digital tools
- Pre-tax commuter benefits (US Employees)
- 401(k) plan with Fidelity with employer match (US Employees)
- Regular team events to connect, recharge, and have fun
- And most importantly: the opportunity to help build the company you want to work at

**UK Employee-specific benefits are included on our UK job postings

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

## About Ironclad

## Company Overview
- **One-liner**: Ironclad provides an AI-powered contract lifecycle management (CLM) platform that helps legal and business teams draft, negotiate, manage, and analyze contracts.
- **Entity Type**: Private (funding stage: Series E)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2014
- **Founders**: Jason Boehmig (CEO) and Cai Wangwilt (engineer)

## Core Business
- **Primary industry/industries**: Legal Technology, Contract Lifecycle Management (CLM), Enterprise Software
- **Target customers**: B2B, primarily legal departments and business teams within mid-market to large enterprises
- **Mission or purpose statement**: "Keep Contracts Moving, and Business Growing."

## Products & Services
For each major offering:
- **Ironclad AI Platform**: The core SaaS platform for creating, reviewing, negotiating, signing (with native eSignature), and managing contracts. Includes AI-powered features for automation, data extraction, and analytics.
- **Jurist (AI Assistant)**: An agentic AI assistant designed for legal work that can draft, edit, summarize, translate, and explain contracts with transparent reasoning.
- **AI Assist**: A GPT-4-powered tool for contract negotiation that flags risk, drafts clauses, and performs first-pass redlining.
- **Smart Import**: An AI tool to upload, tag, and index existing contracts, making them searchable and surfacing key insights.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (Series E raised in 2024, total funding of $334.1M).
- **Key Metric**: Total funding of $334.1M across 10 rounds; over 2 billion contracts processed on the platform.
- **Notable Investors/Partners**: Accel (led Series A), Sequoia Capital (led Series B), Y Combinator (led Series C), and others. Integrates with Salesforce, Coupa, Ramp, and many other tools.
- **Growth Signals**: Named a Leader in the 2025 Gartner Magic Quadrant for CLM; named a Leader in The Forrester Wave™: CLM Platforms, Q1 2025; named a Digital World Class CLM Provider by The Hackett Group; employee headcount grew by 32% YoY (632 employees); operates in 8 countries (US, UK, Canada, Brazil, Australia, Mexico, and more); named Fast Company's Most Innovative Companies in 2026.

## Competitive Advantages
- Specific moats or differentiators that make them hard to compete with: Strong industry analyst recognition (Gartner, Forrester, Hackett Group Leaders); purpose-built AI (Jurist) with agentic capabilities for legal work; native eSignature integrated into the CLM; strong ecosystem of integrations with major enterprise tools; processed 2 billion+ contracts, providing a massive data advantage for AI training.

## Strategic Focus
- Current priorities and direction for growth: Deepening AI capabilities across the entire contract lifecycle (from drafting to analysis); expanding its agentic AI assistant, Jurist; growing its enterprise customer base globally (especially EMEA from London office); leveraging its scale (billions of contracts) to improve AI accuracy and value.

## Why Work Here
- Culture highlights relevant to job seekers: Core values of Empathy, Intent, Drive, and Integrity. Recognized as an award-winning workplace by Fast Company ("Best Workplace for Innovators" in 2024, "Most Innovative Companies" in 2026), Fortune ("Best Place to Work Bay Area" 2023, 2024), and Business Insider ("Start-ups to Bet Your Career On" 2023).
- Remote/hybrid/office policy: Hybrid company with offices in San Francisco (HQ in Financial District), New York (Flatiron), and London. They hire remotely for select roles but prioritize in-person collaboration around hubs.
- Notable perks or engineering culture: 100% health insurance coverage for employees (medical, dental, vision), monthly stipends for wellness/mental health (Modern Health) and hybrid work/cell phone, family-forming support (Maven) and generous gender-neutral parental leave, flexible PTO, 401(k) plan with Fidelity.

## Sources
1. [Ironclad Website](https://ironcladapp.com/)
2. [Ironclad Careers Page](https://ironcladapp.com/careers)
3. [Ironclad About Us](https://ironcladapp.com/about-us)
4. [Ironclad LinkedIn](https://www.linkedin.com/company/ironclad-inc-)
5. [Built In Profile](https://builtin.com/company/ironclad)

## Other roles at Ironclad

- [Staff Product Manager, AI Data Experience](https://feeny.ai/job/staff-product-manager-ai-data-experience-ironclad-san-francisco-f8zvba1z2k04) — San Francisco, CA
- [Technical Support Engineer, EMEA](https://feeny.ai/job/technical-support-engineer-emea-ironclad-london-rr4y1953m8tk) — London, United Kingdom
- [AVP, Enterprise Sales Leader](https://feeny.ai/job/avp-enterprise-sales-leader-ironclad-united-states-fqeapqhfmrdz) — United States
- [Staff Product Manager](https://feeny.ai/job/staff-product-manager-ironclad-san-francisco-81r9z3a7ty17) — San Francisco, CA
- [Technical Adoption Architect, EMEA (Implementation Consultant)](https://feeny.ai/job/technical-adoption-architect-emea-implementation-consultant-ironclad-london-ecbhtfwr5s40) — London, United Kingdom
- [Customer Account Executive](https://feeny.ai/job/customer-account-executive-ironclad-new-york-eebqnkwdth1c) — New York, NY
- [Director, GTM Engineering & Systems Architecture](https://feeny.ai/job/director-gtm-engineering-systems-architecture-ironclad-san-francisco-abdast200y57) — San Francisco, CA
- [Senior Director, Global Sales Strategy and Operations](https://feeny.ai/job/senior-director-global-sales-strategy-and-operations-ironclad-san-francisco-7kwx31409fr9) — San Francisco, CA
- [Staff IT Engineer](https://feeny.ai/job/staff-it-engineer-ironclad-san-francisco-51t4620yez9y) — San Francisco, CA
- [Staff/Senior Staff Software Engineer, Agentic Search](https://feeny.ai/job/staff-senior-staff-software-engineer-agentic-search-ironclad-san-francisco-kya6781ey7th) — San Francisco, CA