Senior IT Security Engineer

What you'll do

• Administer workforce identity and SaaS access, including Okta, SSO, provisioning, and employee/contractor lifecycle workflows.
• Improve privileged, non-human, and AI identity access controls; support access reviews and ISO 27001/SOC 2 evidence.
• Share IT/security operations, incident response, documentation, and on-call coverage.

What they ask for

• Hands-on IT or security engineering experience with significant responsibility for Okta or a comparable workforce identity provider.
• Experience administering IdP groups, policies, SaaS assignments, MFA, and administrative roles; implementing and troubleshooting SAML/OIDC SSO, SCIM provisioning, and OAuth integrations.
• Experience managing employee and contractor identity lifecycles across HR systems, an IdP, Google Workspace, and downstream SaaS; ability to automate access workflows.
• Understanding of least privilege, RBAC/ABAC, access reviews, and lifecycle controls; working familiarity with endpoint security, EDR, DLP, email security, and SaaS security tools.

Nice to have

• Experience with temporary privileged access management platforms or non-human identity governance.
• Familiarity with AI identity and delegated access, MCP integrations, or ISO 27001/SOC 2 controls in a regulated environment.

Pay

$162,000 – $190,000 USD base salary

Tools

Okta, SAML/OIDC, SCIM, Google Workspace, OAuth, Okta Workflows, MCP, EDR

AI focus

Shape identity and delegated-access controls for AI platforms, AI agents, and MCP integrations, including defining the scope of access available to tools and agents.