Security Engineer

What you'll do

• Engineer and deploy Zero-Trust access controls for workforce and service identities using RBAC and ABAC standards.
• Implement risk-adaptive policies including device posture checks for critical services and high-risk scenarios.
• Harden privileged access by right-sizing entitlements and eliminating long-lived elevated access across prioritized services.
• Define security baselines, remediation runbooks, and success measurements for SaaS platforms like M365, Slack, and GitHub.
• Instrument identity metrics to track authentication, authorization, and entitlement changes via automated dashboards.
• Develop architecture guides and reference standards to measure risk reduction over time.
• Automate policy and pipeline workflows using scripting languages such as Python or PowerShell.

What we're looking for

• A Bachelor’s degree or equivalent experience is required.
• Candidates must have at least 2 years of relevant experience.
• Experience working as a member of a technical team in enterprise environments is required.
• Familiarity with identity solutions including Entra ID, Okta, and SailPoint is required.
• Knowledge of core IT concepts regarding network, user, data protection, and cloud platforms is required.
• Strong written and verbal communication skills are required to collaborate with internal partners.
• Preferred knowledge of scripting/automation in Python or PowerShell and infrastructure-as-code tools like Terraform.
• Preferred awareness of secure access control solutions, secrets management, and CI/CD systems.