IT Security & Identity Engineer
Core
Technical owner of identity, access, and endpoint security for a corporate IT environment, managing identity providers, SSO federation, and security controls for engineers, scientists, and clinicians.
Role type
Senior IC IT Security & Identity Engineer
Builds
Identity provider infrastructure, SSO federation, endpoint security policies, and security logging/detection systems
Domain
Enterprise IT Security, Identity & Access Management (IAM), Endpoint Security
Required skills
Enterprise IdP administration (Google Workspace, Microsoft Entra, Okta), IAM protocols (SAML, OIDC, OAuth 2.0, SCIM), Infrastructure as Code (Terraform, GitLab CI/CD), Endpoint security (EDR, MDM, disk encryption), Security logging and detection (SIEM, Grafana, Loki), Vulnerability management, Scripting (Python, Bash, PowerShell)
Preferred skills
Phishing-resistant MFA (FIDO2, WebAuthn, passkeys), Certificate-based authentication (X.509, 802.1x), Zero-trust architecture, Detection engineering, Privileged access management, Incident response, Compliance frameworks (HIPAA, SOC 2, NIST 800-53)
Responsibilities
Design and operate identity lifecycle automation including RBAC and just-in-time access; Manage endpoint security posture across macOS, Windows, and Linux; Build and maintain security logging and detection for corporate IT; Run enterprise vulnerability management; Harden traditional IT services and network services; Lead detection, triage, and incident response; Conduct access reviews and audits; Drive scripting and automation for security tasks.
Seniority
Senior, hands-on IC