Enterprise Security Engineer

📋 Description

• Drive zero trust end-to-end: identity, device health, network, and app context.
• Design least-privilege access, Just-in-Time (JIT), and PAM controls.
• Deploy and maintain macOS MDM for the fleet; feed zero-trust decisions.
• Enforce SSO policies, review OAuth scopes, and audit third-party access.
• Build tooling to detect shadow IT and unauthorized OAuth apps.
• Develop automation and AI-assisted tooling to reduce analyst toil.

🎯 Requirements

• 5+ years in security engineering or IAM.
• Deep IdP expertise (Okta): SSO, SCIM, MFA, Lifecycle Management.
• Hands-on zero trust architecture delivery.
• Identity protocols: SAML, OIDC, OAuth 2.0, SCIM.
• MacOS endpoints at scale using Fleet or an equivalent MDM.
• Foundational cloud IAM experience (AWS, GCP, or Azure).

🎁 Benefits

• Hybrid work arrangement with on-site 3 days per week.