M&A Collaboration & Security Platforms Engineer

Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system. This role owns the productivity and collaboration platforms, Google Workspace, Slack, and Zoom, across the Payward family of brands, with a focus on M&A integration. When we buy a company, you're the person who scopes the migration, moves the users, channels, files, and configurations, untangles the acquired environment, and lands it cleanly inside Payward's security and identity stack.

Responsibilities

Drive collaboration-platform integration end-to-end for each acquisition, scoping, planning, executing, and closing out migrations of users, Slack channels, Google Workspace Drive, mailboxes, and configurations from acquired companies into the Payward environment; Assess acquired-company collaboration stacks during and after diligence: what they run, how it's configured, what the security and compliance gaps are, and what it takes to consolidate; Rationalize overlapping tools across brands, decide what migrates, what sunsets, and what stays, and see those calls through; Build repeatable playbooks, tooling, and automation so each successive integration is faster and cleaner than the last; Coordinate cutover timelines and TSA-driven dependencies with Corporate Development, Legal, and the acquired teams; Own Google Workspace, Slack, and Zoom at multi-entity enterprise scale, architecture, governance, licensing, configuration, and day-to-day operations across the brand portfolio; Build and maintain integrations between collaboration tools and the broader identity and security stack (Okta, Global Relay, eDiscovery tooling, archiving platforms); Define and enforce cross-brand platform governance standards; build automation that makes the secure path the easy path; Collaborate with HRIS and IAM teams to manage clean onboarding and offboarding across platforms and entities; Own email security infrastructure across brands, filtering, quarantine, impersonation defenses, and DMARC/SPF/DKIM hygiene, and raise the bar as new entities and threats arrive; Manage a large, multi-registrar, multi-brand domain portfolio (Cloudflare, MarkMonitor, and others); lead DNS migrations, audits, and consolidation as brands come in; Respond to phishing campaigns, insider threat signals, and anomalous domain activity with speed and precision; Lead legal hold management, eDiscovery queries, and data productions across email, Slack, and Google Drive, across multiple entities; Architect and maintain compliant archiving infrastructure (Global Relay, Smarsh, Virtru) as new businesses are onboarded and legacy ones sunset; Produce and defend evidence for regulatory and audit obligations (17a-4, ISO, external auditors), working directly with Legal and Compliance; Design and maintain DLP rules, group access controls, and data access policies across collaboration platforms and entities; Lead insider threat reduction initiatives, access revocation, high-risk extension management, public channel governance, during and after integrations, when risk is highest; Own platform-level incident response: investigation, containment, and post-incident improvement; Evaluate, onboard, consolidate, and sunset SaaS tools across the collaboration and security stack as the portfolio grows; Lead vendor relationships, procurement, and renewals; make build-vs-buy-vs-sunset calls and see them through; Build automation that reduces manual toil and improves governance at scale

Requirements

4–6 years of hands-on experience administering Google Workspace and Slack at companies with 1,000+ users, including complex migrations and governance work; Demonstrated experience owning or leading a technology migration in an M&A or systems-consolidation context, ideally more than one; Solid email security experience: filtering, quarantine, DMARC/SPF/DKIM, impersonation defense, threat response; DNS administration and domain portfolio management at meaningful scale; Direct experience with compliance and legal workflows, legal holds, eDiscovery, regulatory data productions, and compliant archiving platforms; You operate end-to-end: scope the problem, design the solution, execute it, and close it out cleanly, especially under the time pressure of a deal; You're comfortable making decisions under ambiguity, acquired environments are always messy, and defending them with clear reasoning; You understand that clean infrastructure is a security control, not an operational nicety; You work well across functions: Legal, Compliance, IT, Security, Corporate Development, and the acquired teams you're integrating; You communicate proactively, no backchannels, no surprises; stakeholders know where things stand; You manage multiple concurrent integrations without losing threads; You automate and systematize recurring work; you build things that outlast you, documentation, tooling, governance frameworks others can operate; You take ownership: if something's broken, you fix it

Nice to have

Experience integrating multiple acquired companies' collaboration stacks into a single parent environment; Experience with Global Relay, Smarsh, Virtru, or comparable archiving platforms, including onboarding and architecture decisions; Familiarity with Okta and its integration patterns with Google Workspace and Slack; Experience managing a large domain portfolio across multiple registrars and DNS providers; Exposure to eDiscovery and legal hold tooling; Comfort in a regulated industry, financial services, crypto, fintech, where compliance isn't optional