Senior Security Engineer

What you'll do

• Engineer Zero-Trust access controls for workforce and service identities using RBAC and ABAC standards.
• Migrate administrators to right-sized entitlements and eliminate long-lived elevated access across prioritized platforms.
• Conduct tool POCs and deployments for SaaS security posture monitoring across M365, Slack, GitHub, Workday, and Google.
• Standardize log schemas for authentication and authorization to instrument identity metrics and tracking.
• Publish dashboards showing privilege drift, misconfigurations, and access sprawl to coordinate risky events.
• Author implementation guides and reference architectures to support a multi-year identity security strategy.
• Automate policy and pipeline deployments using scripting, infrastructure-as-code, and CI/CD solutions.

What we're looking for

• Experience with enterprise identity controls including Entra ID/AD, Okta, and SailPoint (or equivalents).
• Strong understanding of Zero Trust principles, least privilege, and continuous verification models.
• SaaS posture skills for securing large tenants including M365, Slack, GitHub, Workday, and Google.
• Excellent written and verbal communication skills to convey complex solutions to business leaders and technical specialists.
• Ability to deliver measurable technical outcomes aligned with long-term goals.
• Engineering familiarity with secure access control solutions, secrets management, and CI/CD solutions (preferred).
• Scripting/automation knowledge in Python or PowerShell and infrastructure-as-code experience with Terraform (preferred).
• Exposure to service identity frameworks like SPIFFE/SPIRE and workload identity patterns (preferred).