Security Engineer

What you'll do

• Engineer and deploy Zero-Trust access controls using RBAC and ABAC standards for workforce and service identities.
• Harden privileged access by migrating administrators to right-sized entitlements and eliminating long-lived elevated access.
• Implement SaaS security posture controls and define security baselines for platforms like M365, Slack, and GitHub.
• Build remediation runbooks and establish success measurements for SaaS security posture.
• Instrument identity metrics to track authentication, authorization, and entitlement changes.
• Publish dashboards for privilege drift, misconfigurations, and access sprawl.
• Coordinate risky identity events to established security alert procedures.
• Develop architecture and standards implementation guides to reduce enterprise risk over time.

What we're looking for

• Awareness of enterprise security controls and concepts, including development and application.
• Familiarity reviewing enterprise identity controls and solutions using Entra ID, AD, Okta, and SailPoint (or equivalents).
• Knowledge of core information technology concepts associated with network, user, and data protection, and common cloud platforms.
• Ability to influence and collaborate with IT, security teams, and the business to develop security outcomes.
• Strong written and verbal communication skills to communicate problems and solutions to peers and technical specialists.
• Ability to deliver measurable outcomes in a technical environment that aligns with long-term goals.
• Engineering awareness of secure access control solutions, secrets management, and CI/CD solutions (preferred).
• Scripting/automation knowledge in Python or PowerShell and curiosity about infrastructure-as-code (preferred).
• 2+ years of relevant experience (preferred).
• Bachelor’s degree or equivalent experience (preferred).
• Experience in enterprise environments as a member of a technical team (preferred).