Senior Security Engineer

What you'll do

• Engineer Zero-Trust access controls for workforce and service identities using RBAC and ABAC standards.
• Implement risk-adaptive policies including device posture checks for critical services and high-risk scenarios.
• Harden privileged access by migrating administrators to right-sized entitlements and removing long-lived elevated access.
• Conduct tool POCs and deployments to monitor SaaS security posture across platforms like M365, Slack, and GitHub.
• Develop remediation runbooks and establish metrics to measure security posture success.
• Standardize log schemas for authentication and authorization to build dashboards tracking privilege drift and misconfigurations.
• Author implementation guides and reference architectures to support multi-year identity strategy and risk reduction.
• Automate policy and pipeline deployments using scripting languages like Python or PowerShell and infrastructure-as-code tools.

What we're looking for

• Must have at least 5 years of relevant experience.
• A Bachelor's degree or equivalent experience is required.
• Experience with enterprise identity controls and solutions including Entra ID, Okta, and SailPoint.
• Strong understanding of Zero Trust principles, least privilege models, and continuous verification.
• Skills in securing large SaaS tenants such as M365, Slack, GitHub, Workday, and Google.
• Preferred knowledge of scripting/automation (Python, PowerShell) and infrastructure-as-code (Terraform).
• Preferred familiarity with secure access control solutions, secrets management, and CI/CD tools.
• Exposure to service identity frameworks like SPIFFE/SPIRE and workload identity patterns is preferred.