Senior Corporate Engineer II

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table. Instacart is a Flex First team There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. Learn more about our flexible approach to where we work. Overview Instacart’s IT organization empowers every employee to work securely, reliably, and at scale. We’re looking for a Senior Corporate Engineer II to own and evolve our security-critical workforce platforms, including our Okta identity platform, device trust program, and office networks across San Francisco, New York City, and Toronto. Your work will directly impact every Instacart employee and partner by ensuring seamless, safe access to the tools we rely on every day. You’ll collaborate closely with Security Engineering, Enterprise Applications, Workplace, Compliance, and our Help Desk teams to ship automation, harden our posture, and raise operational reliability. This is a hands-on role in a fast-paced, ever-changing environment—ideal for someone who thrives in ambiguity, rolls up their sleeves to solve complex problems, and brings sound architectural judgment to high-stakes systems. We are a dynamic team that loves tackling unique scenarios while building solutions that are scalable and secure. The role is remote-friendly within North America, with a preference for candidates in the Pacific Time Zone and the San Francisco Bay Area. Occasional travel to Instacart offices may be required (up to 10%). About the Job Own the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust. Design and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioning. Architect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner management. Lead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change management. Standardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditability. Partner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizing. Mentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environment. About You Minimum Qualifications 7+ years of experience in corporate IT engineering or