M&A Collaboration & Security Platforms Engineer

Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.

Before you apply, we encourage you to explore our culture page to understand what drives us and how we work.

Payward, the parent company behind Kraken, NinjaTrader, xStocks, Breakout, and a growing portfolio of businesses, is scaling fast through active M&A. Every acquisition brings its own collaboration stack, its own Google Workspace tenant or Slack instance, its own domains, its own archiving obligations. Someone has to bring all of that into one secure, compliant, well-run environment. That someone is you.

This role owns the productivity and collaboration platforms, Google Workspace, Slack, and Zoom, across the Payward family of brands, with a focus on M&A integration. When we buy a company, you're the person who scopes the migration, moves the users, channels, files, and configurations, untangles the acquired environment, and lands it cleanly inside Payward's security and identity stack.

You'll work across Legal, Compliance, IT, Security, Corporate Development, and the acquired companies themselves, often as the most knowledgeable person in the room on how these platforms actually connect. This is a build-and-own role, not a keep-the-lights-on role.

• Drive collaboration-platform integration end-to-end for each acquisition, scoping, planning, executing, and closing out migrations of users, Slack channels, Google Workspace Drive, mailboxes, and configurations from acquired companies into the Payward environment

• Assess acquired-company collaboration stacks during and after diligence: what they run, how it's configured, what the security and compliance gaps are, and what it takes to consolidate

• Rationalize overlapping tools across brands, decide what migrates, what sunsets, and what stays, and see those calls through

• Build repeatable playbooks, tooling, and automation so each successive integration is faster and cleaner than the last

• Coordinate cutover timelines and TSA-driven dependencies with Corporate Development, Legal, and the acquired teams

• Own Google Workspace, Slack, and Zoom at multi-entity enterprise scale, architecture, governance, licensing, configuration, and day-to-day operations across the brand portfolio

• Build and maintain integrations between collaboration tools and the broader identity and security stack (Okta, Global Relay, eDiscovery tooling, archiving platforms)

• Define and enforce cross-brand platform governance standards; build automation that makes the secure path the easy path

• Collaborate with HRIS and IAM teams to manage clean onboarding and offboarding across platforms and entities

• Own email security infrastructure across brands, filtering, quarantine, impersonation defenses, and DMARC/SPF/DKIM hygiene, and raise the bar as new entities and threats arrive

• Manage a large, multi-registrar, multi-brand domain portfolio (Cloudflare, MarkMonitor, and others); lead DNS migrations, audits, and consolidation as brands come in

• Respond to phishing campaigns, insider threat signals, and anomalous domain activity with speed and precision

• Lead legal hold management, eDiscovery queries, and data productions across email, Slack, and Google Drive, across multiple entities

• Architect and maintain compliant archiving infrastructure (Global Relay, Smarsh, Virtru) as new businesses are onboarded and legacy ones sunset

• Produce and defend evidence for regulatory and audit obligations (17a-4, ISO, external auditors), working directly with Legal and Compliance

• Design and maintain DLP rules, group access controls, and data access policies across collaboration platforms and entities

• Lead insider threat reduction initiatives, access revocation, high-risk extension management, public channel governance, during and after integrations, when risk is highest

• Own platform-level incident response: investigation, containment, and post-incident improvement

• Evaluate, onboard, consolidate, and sunset SaaS tools across the collaboration and security stack as the portfolio grows

• Lead vendor relationships, procurement, and renewals; make build-vs-buy-vs-sunset calls and see them through

• Build automation that reduces manual toil and improves governance at scale

• 4–6 years of hands-on experience administering Google Workspace and Slack at companies with 1,000+ users, including complex migrations and governance work

• Demonstrated experience owning or leading a technology migration in an M&A or systems-consolidation context, ideally more than one. This is the heart of the role

• Solid email security experience: filtering, quarantine, DMARC/SPF/DKIM, impersonation defense, threat response

• DNS administration and domain portfolio management at meaningful scale

• Direct experience with compliance and legal workflows, legal holds, eDiscovery, regulatory data productions, and compliant archiving platforms

• You operate end-to-end: scope the problem, design the solution, execute it, and close it out cleanly, especially under the time pressure of a deal

• You're comfortable making decisions under ambiguity, acquired environments are always messy, and defending them with clear reasoning

• You understand that clean infrastructure is a security control, not an operational nicety

• You work well across functions: Legal, Compliance, IT, Security, Corporate Development, and the acquired teams you're integrating

• You communicate proactively, no backchannels, no surprises; stakeholders know where things stand

• You manage multiple concurrent integrations without losing threads

• You automate and systematize recurring work; you build things that outlast you, documentation, tooling, governance frameworks others can operate

• You take ownership: if something's broken, you fix it

• Experience integrating multiple acquired companies' collaboration stacks into a single parent environment

• Experience with Global Relay, Smarsh, Virtru, or comparable archiving platforms, including onboarding and architecture decisions

• Familiarity with Okta and its integration patterns with Google Workspace and Slack

• Experience managing a large domain portfolio across multiple registrars and DNS providers

• Exposure to eDiscovery and legal hold tooling

• Comfort in a regulated industry, financial services, crypto, fintech, where compliance isn't optional

Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.

Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.

We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.

We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.

As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.

Stay connected

Follow us on Twitter

Learn on the Kraken Blog

Connect on LinkedIn

Candidate Privacy Notice