IT Security Engineer
Core
Own security standards and controls for workforce identities, endpoints, and critical business systems, including identity and access management, single sign-on, privileged access, multi-factor authentication, endpoint security, secure network access, and email security.
Role type
Senior IC IT Security Engineer (Identity & Endpoint)
Builds
Security standards, policies, and measurable control enforcement for Alpaca's workforce and systems
Domain
Financial services / Cybersecurity
Required skills
Identity and access management (IAM), Single Sign-On (SSO), Multi-factor authentication (MFA), Endpoint detection and response (EDR), Scripting (Python, Bash, PowerShell), Zero-trust network access, Email authentication (SPF, DKIM, DMARC), Incident response
Preferred skills
Financial services security, Compliance frameworks (SOC 2, ISO 27001), Just-in-time privileged access, Secrets management, Mobile Device Management (MDM), Cloud IAM (AWS, GCP, Azure)
Technologies
SAML, OIDC, FIDO2, EDR platforms, Python, Bash, PowerShell, SPF, DKIM, DMARC
Responsibilities
Define and maintain SSO and conditional access standards; Enforce phishing-resistant MFA; Maintain privileged access policies and reviews; Partner on joiner/mover/leaver access changes; Tune EDR policies and device posture requirements; Measure control effectiveness; Lead identity, endpoint, and email aspects of security incidents; Participate in on-call rotation; Provide security guidance to IT and employees
Seniority
Senior, hands-on IC