Staff Corporate Engineer

Instacart

Staff Corporate Engineer at Instacart defining the technical strategy for workforce security platforms. Owning long-term identity architecture and enterprise network strategies for corporate engineering.

Posted 6/13/2026full-timeRemote • California, Colorado, Connecticut, District of Columbia, Hawaii, Illinois, Maine, Maryland, Massachusetts, New Hampshire, New Jersey, New York, Oregon, Pennsylvania, Rhode Island, Texas, Vermont, Virginia, Washington • 🇺🇸 United StatesLead💰 $182,000 - $230,000 per yearWebsite

Tech Stack

Tools & technologies

CloudFirewallsITSMPythonSwitchingTerraform

About the role

Key responsibilities & impact

Define and own the long-term identity architecture strategy for Instacart, setting the technical direction for our Okta identity platform including Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust. Establish the architectural patterns and governance frameworks the team builds against.
Establish and own the IaC engineering standards and platform patterns for identity and access across Corporate Engineering; author the reusable Terraform frameworks, guardrails, and automation blueprints adopted by the team to achieve consistent, auditable, least-privilege provisioning at scale, integrated with HRIS and ITSM systems.
Define Instacart's office network architecture strategy and target-state design across SF, NYC, and Toronto; drive the evolution to zero-trust segmentation, set observability and capacity standards, and guide vendor strategy across all office locations.
Own the IT endpoint strategy for MDM (both Mac and Windows) to both implement and secure our workforce endpoints. Consider best in class endpoint management practises and replatform our systems where required.
Serve as the technical authority for major IT incidents; own post-incident learning programmes, drive systemic architectural improvements that reduce blast radius and incident frequency, and define the incident response standards adopted across the team.
Identify opportunities to position Instacart Corporate Engineering and IT team at the forefront of AI adoption. This includes building tools to enable the next generation of IT and building beyond a cloud native/SaaS era into the next generation of AI native work.
Drive the access governance and compliance architecture strategy in partnership with Security Engineering and Compliance; define the frameworks for access reviews, evidence collection, and access risk management that ensure Instacart's posture scales with the business and delivers license efficiency through automated revocation and right-sizing.
Act as a technical force multiplier across Corporate Engineering and adjacent teams; develop senior engineers, define team-wide engineering standards and documentation practices, and own the technical roadmap for identity and network platforms. Identify and champion high-impact, multi-quarter initiatives that advance the organisation's security and reliability posture.

Requirements

What you’ll need

10+ years of experience in corporate IT engineering or a related field, with deep expertise in identity and access management (IAM) and endpoint systems.
5+ years of hands-on ownership of an enterprise Okta tenant at scale (5,000+ users), including architecture-level decisions across SSO (SAML/OIDC), SCIM provisioning, MFA, risk-based policies, and device trust.
3+ years of experience designing and implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or an equivalent IGA platform, with demonstrated ownership of org-wide governance frameworks.
Expert-level proficiency with Infrastructure-as-Code: Terraform required, including experience establishing reusable module frameworks and IaC engineering standards adopted across a team. Proficiency in at least one scripting language (Python, PowerShell, or equivalent) and REST API/webhook integration.
Experience with endpoint management (MDM) systems in a mixed Mac and Windows environment. Ideally with IaC methodologies being deployed.
Proven track record of technical leadership across teams, setting architectural direction, defining standards, and driving cross-functional alignment without managerial authority.
Experience with enterprise network infrastructure (firewalls, routing/switching, wireless) including zero-trust architecture design and multi-site network strategy.
Strong written and verbal communication; able to articulate technical strategy and architectural trade-offs to both engineers and business stakeholders.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

identity and access managementOktaSSOSCIM provisioningMFATerraformInfrastructure-as-CodePythonPowerShellREST API

Soft Skills

technical leadershipcross-functional alignmentcommunicationarchitectural directiondocumentation practicesincident responsepost-incident learningteam developmentstrategic thinkingproblem-solving