Kraken
IAM Engineer
United States7h ago
Kraken
Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.
Payward, the parent company behind Kraken, NinjaTrader, xStocks, Breakout, and a growing portfolio of businesses, is scaling fast through active M&A. Every acquisition brings its own collaboration stack, its own Google Workspace tenant or Slack instance, its own domains, its own archiving obligations. Someone has to bring all of that into one secure, compliant, well-run environment. That someone is you.
This role owns the productivity and collaboration platforms, Google Workspace, Slack, and Zoom, across the Payward family of brands, with a focus on M&A integration. When we buy a company, you're the person who scopes the migration, moves the users, channels, files, and configurations, untangles the acquired environment, and lands it cleanly inside Payward's security and identity stack.
You'll work across Legal, Compliance, IT, Security, Corporate Development, and the acquired companies themselves, often as the most knowledgeable person in the room on how these platforms actually connect. This is a build-and-own role, not a keep-the-lights-on role.
Drive collaboration-platform integration end-to-end for each acquisition, scoping, planning, executing, and closing out migrations of users, Slack channels, Google Workspace Drive, mailboxes, and configurations from acquired companies into the Payward environment
Assess acquired-company collaboration stacks during and after diligence: what they run, how it's configured, what the security and compliance gaps are, and what it takes to consolidate
Rationalize overlapping tools across brands, decide what migrates, what sunsets, and what stays, and see those calls through
Build repeatable playbooks, tooling, and automation so each successive integration is faster and cleaner than the last
Coordinate cutover timelines and TSA-driven dependencies with Corporate Development, Legal, and the acquired teams
Own Google Workspace, Slack, and Zoom at multi-entity enterprise scale, architecture, governance, licensing, configuration, and day-to-day operations across the brand portfolio
Build and maintain integrations between collaboration tools and the broader identity and security stack (Okta, Global Relay, eDiscovery tooling, archiving platforms)
Define and enforce cross-brand platform governance standards; build automation that makes the secure path the easy path
Collaborate with HRIS and IAM teams to manage clean onboarding and offboarding across platforms and entities
Own email security infrastructure across brands, filtering, quarantine, impersonation defenses, and DMARC/SPF/DKIM hygiene, and raise the bar as new entities and threats arrive
Manage a large, multi-registrar, multi-brand domain portfolio (Cloudflare, MarkMonitor, and others); lead DNS migrations, audits, and consolidation as brands come in
Respond to phishing campaigns, insider threat signals, and anomalous domain activity with speed and precision
Lead legal hold management, eDiscovery queries, and data productions across email, Slack, and Google Drive, across multiple entities
Architect and maintain compliant archiving infrastructure (Global Relay, Smarsh, Virtru) as new businesses are onboarded and legacy ones sunset
Produce and defend evidence for regulatory and audit obligations (17a-4, ISO, external auditors), working directly with Legal and Compliance
Design and maintain DLP rules, group access controls, and data access policies across collaboration platforms and entities
Lead insider threat reduction initiatives, access revocation, high-risk extension management, public channel governance, during and after integrations, when risk is highest
Own platform-level incident response: investigation, containment, and post-incident improvement
Evaluate, onboard, consolidate, and sunset SaaS tools across the collaboration and security stack as the portfolio grows
Lead vendor relationships, procurement, and renewals; make build-vs-buy-vs-sunset calls and see them through
Build automation that reduces manual toil and improves governance at scale
4–6 years of hands-on experience administering Google Workspace and Slack at companies with 1,000+ users, including complex migrations and governance work
Demonstrated experience owning or leading a technology migration in an M&A or systems-consolidation context, ideally more than one. This is the heart of the role
Solid email security experience: filtering, quarantine, DMARC/SPF/DKIM, impersonation defense, threat response
DNS administration and domain portfolio management at meaningful scale
Direct experience with compliance and legal workflows, legal holds, eDiscovery, regulatory data productions, and compliant archiving platforms
You operate end-to-end: scope the problem, design the solution, execute it, and close it out cleanly, especially under the time pressure of a deal
You're comfortable making decisions under ambiguity, acquired environments are always messy, and defending them with clear reasoning
You understand that clean infrastructure is a security control, not an operational nicety
You work well across functions: Legal, Compliance, IT, Security, Corporate Development, and the acquired teams you're integrating
You communicate proactively, no backchannels, no surprises; stakeholders know where things stand
You manage multiple concurrent integrations without losing threads
You automate and systematize recurring work; you build things that outlast you, documentation, tooling, governance frameworks others can operate
You take ownership: if something's broken, you fix it
Experience integrating multiple acquired companies' collaboration stacks into a single parent environment
Experience with Global Relay, Smarsh, Virtru, or comparable archiving platforms, including onboarding and architecture decisions
Familiarity with Okta and its integration patterns with Google Workspace and Slack
Experience managing a large domain portfolio across multiple registrars and DNS providers
Exposure to eDiscovery and legal hold tooling
Comfort in a regulated industry, financial services, crypto, fintech, where compliance isn't optional
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.
Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.
We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.
Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connected
web3.career
Kraken