Senior Security Engineer

What you'll do

• Engineer Zero-Trust access controls for workforce and service identities using RBAC and ABAC standards.
• Implement risk-adaptive policies including device posture checks for critical services and high-risk scenarios.
• Harden privileged access by migrating administrators to right-sized entitlements and removing long-lived elevated access.
• Conduct tool POCs and deployments for monitoring the security posture of various SaaS platforms.
• Establish security baselines, remediation runbooks, and success measurements for major enterprise applications like M365 and Slack.
• Standardize log schemas and build dashboards to track identity metrics such as privilege drift and misconfigurations.
• Author implementation guides and reference architectures to support multi-year identity strategy and risk reduction.

What we're looking for

• Experience with enterprise identity controls including Entra ID, Okta, and SailPoint.
• Strong understanding of Zero Trust principles, least privilege models, and continuous verification.
• Skills in securing large SaaS tenants such as M365, Slack, GitHub, Workday, and Google.
• Excellent written and verbal communication skills for technical and business audiences.
• Preferred familiarity with secure access control solutions, secrets management, and CI/CD tools.
• Knowledge of scripting/automation (Python, PowerShell) and infrastructure-as-code (Terraform).
• Exposure to service identity frameworks like SPIFFE/SPIRE and workload identity patterns.
• A Bachelor’s degree or equivalent experience and at least 5 years of relevant experience.