Staff Corporate Engineer

About Instacart

At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. We work to deliver an essential service that customers rely on, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers. Instacart has become a lifeline for millions, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.

Instacart is a Flex First team, offering flexibility to choose where you do your best work—whether it's from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events.

Overview of the Role

Instacart’s IT organization empowers every employee to work securely, reliably, and at scale. We're looking for a Staff Corporate Engineer to define the technical strategy and architecture for our security-critical workforce platforms, including our Okta identity platform, device trust program, and office networks across San Francisco, New York City, and Toronto. You will set the long-term technical direction for identity, access, and network infrastructure, establishing architectural frameworks, engineering standards, and automation blueprints. You will serve as the technical authority across Corporate Engineering and drive cross-functional alignment with Security Engineering, Enterprise Applications, Workplace, Compliance, and Help Desk. Your influence will extend beyond your immediate team, identifying high-impact initiatives and shaping how Instacart approaches workforce security and reliability at scale.

This is a senior individual contributor role for someone who combines deep technical expertise with the ability to think in systems, lead without authority, and make sound architectural decisions on high-stakes platforms. This role is remote-friendly within North America. Occasional travel to Instacart offices may be required (up to 10%).

Key Responsibilities

• Identity Architecture Strategy: Define and own the long-term identity architecture strategy for Instacart, setting the technical direction for our Okta identity platform including Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust. Establish architectural patterns and governance frameworks.
• Infrastructure-as-Code (IaC) Standards: Establish and own IaC engineering standards and platform patterns for identity and access across Corporate Engineering. Author reusable Terraform frameworks, guardrails, and automation blueprints for consistent, auditable, least-privilege provisioning at scale, integrated with HRIS and ITSM systems.
• Network Architecture Strategy: Define Instacart’s office network architecture strategy and target-state design across SF, NYC, and Toronto. Drive evolution to zero-trust segmentation, set observability and capacity standards, and guide vendor strategy.
• Endpoint Strategy: Own the IT endpoint strategy for MDM (Mac and Windows), considering best-in-class management practices and replatforming systems where required.
• Incident Management & Learning: Serve as the technical authority for major IT incidents. Own post-incident learning programs, drive systemic architectural improvements, and define incident response standards.
• AI Adoption: Identify opportunities to position Instacart Corporate Engineering and IT at the forefront of AI adoption, building tools for the next generation of IT and AI-native work.
• Access Governance & Compliance: Drive access governance and compliance architecture strategy in partnership with Security Engineering and Compliance. Define frameworks for access reviews, evidence collection, and access risk management.
• Technical Leadership & Mentorship: Act as a technical force multiplier. Develop senior engineers, define team-wide engineering standards and documentation practices, and own the technical roadmap for identity and network platforms. Champion high-impact initiatives.

Minimum Qualifications

• 10+ years of experience in corporate IT engineering or a related field, with deep expertise in identity and access management (IAM) and endpoint systems.
• 5+ years of hands-on ownership of an enterprise Okta tenant at scale (5,000+ users), including architecture-level decisions across SSO (SAML/OIDC), SCIM provisioning, MFA, risk-based policies, and device trust.
• 3+ years of experience designing and implementing identity governance and automation using Okta Workflows, Okta Identity Governance (OIG), or an equivalent IGA platform, with demonstrated ownership of org-wide governance frameworks.
• Expert-level proficiency with Infrastructure-as-Code: Terraform required, including experience establishing reusable module frameworks and IaC engineering standards. Proficiency in at least one scripting language (Python, PowerShell, or equivalent) and REST API/webhook integration.
• Experience with endpoint management (MDM) systems in a mixed Mac and Windows environment, ideally with IaC methodologies.
• Proven track record of technical leadership across teams, setting architectural direction, defining standards, and driving cross-functional alignment without managerial authority.
• Experience with enterprise network infrastructure (firewalls, routing/switching, wireless) including zero-trust architecture design and multi-site network strategy.
• Strong written and verbal communication skills, able to articulate technical strategy and architectural trade-offs.

Preferred Qualifications

• Experience in a high-growth, distributed-workforce environment.
• Familiarity with compliance frameworks (SOC 2, ISO 27001) and translating controls into technical implementations.
• Prior experience as a staff-level or principal engineer in a Corporate Engineering or Enterprise IT function.

Compensation & Benefits

Instacart provides highly market-competitive compensation and benefits. This role is remote. The base pay range for a successful candidate in Canada is:

CAN: $168,000—$177,500 CAD

Offers may vary based on experience, skills, and location. This role is eligible for a new hire equity grant and annual refresh grants. Please review Instacart's benefits offerings for more details.