IT Security & Identity Engineer
Core
Own identity, access, and endpoint security for the corporate IT environment, managing identity providers, SSO federation, and device trust to support engineers, scientists, and clinicians.
Role type
Senior IC IT Security & Identity Engineer
Builds
Identity provider, SSO federation, endpoint protection, detection, and vulnerability management systems
Domain
Enterprise IT Security, Identity & Access Management (IAM)
Required skills
Enterprise IdP administration (Google Workspace, Microsoft Entra, Okta), IAM protocols (SAML, OIDC, OAuth 2.0, SCIM), Infrastructure as Code (Terraform, GitLab CI/CD), Endpoint security (EDR, MDM, disk encryption), Security logging and detection (SIEM, Grafana, Loki), Vulnerability management, Scripting (Python, Bash, PowerShell)
Preferred skills
Phishing-resistant MFA (FIDO2, WebAuthn, passkeys), Certificate-based authentication (X.509, 802.1x), Zero-trust architecture, Detection engineering
Technologies
Google Workspace, Microsoft Entra, Okta, Terraform, GitLab, Intune, Jamf, Grafana, Loki, Prometheus, Tailscale, FortiGate
Responsibilities
Design and operate identity lifecycle automation including RBAC and just-in-time access; Manage identity infrastructure as code; Drive endpoint security posture across macOS, Windows, and Linux; Build and maintain security logging and detection; Run enterprise vulnerability management; Harden traditional IT services; Partner with owners to secure network services; Lead incident response and triage; Conduct access reviews and audits; Drive security automation scripting
Seniority
Senior, hands-on IC