Corporate IT Engineer, Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Administer Okta applications, single sign-on (SSO), multi-factor authentication (MFA), user groups, and access policies.

• Take ownership of the access provisioning and deprovisioning processes across the organization's systems.

• Oversee employee onboarding and offboarding, managing laptop issuance and access removal.

• Conduct regular access reviews while ensuring adherence to the principle of least privilege.

• Automate identity workflows using Okta Workflows, scripting, and AI-enhanced tools.

• Manage mobile device management (MDM) enrollment, device policies, encryption, patching, and endpoint compliance.

• Maintain inventories of devices, applications, accounts, and licenses.

• Act as the initial point of contact for employee inquiries regarding IT and security.

• Implement the compliance program, which includes control monitoring, evidence collection, audit preparation, and coordination with auditors.

• Handle policy approvals and conduct annual policy reviews.

• Administer HIPAA training and security awareness programs, tracking completion rates.

• Develop and maintain compliance processes, policies, and incident notification procedures.

• Monitor relevant vulnerabilities and vendor advisories, driving remediation efforts.

• Respond to client security assessments and questionnaires, maintaining a repository of reusable answers.

• Support client audits and security reviews.

• Collaborate with the Engineering team on application security standards, dependency and vulnerability scanning, and penetration test coordination.

• Track application security findings through remediation processes, ensuring critical issues are resolved.

• Assist engineers in adopting tools with appropriate access, privacy, and data controls.

• Help establish safe practices for company-wide AI usage.

• Serve as the corporate IT and security subject-matter expert as the company scales.

⛳️ Requirements

• A minimum of 2 years of experience in corporate IT, systems administration, IT security, security operations, or a related field.

• Practical experience with an identity provider (such as Okta or similar), encompassing SSO, MFA, and user lifecycle management.

• Experience with an MDM platform (such as Kandji, Jamf, Intune, Mosyle, or similar), preferably in a predominantly macOS environment.

• Familiarity with employee onboarding and offboarding, access provisioning, and conducting access reviews.

• Knowledge of SOC 2 or a comparable compliance framework, including controls, policies, and evidence management.

• Understanding of least privilege principles, endpoint security, vulnerability management, and the fundamentals of incident response.

• Strong written communication skills.

• Proficiency with LLM tools, particularly Claude and Gemini, and the ability to verify their outputs effectively.

• Good judgment in balancing security, usability, and speed of operations.

• Ability to operate within a diverse functional area, learn quickly, and address problems directly.

• Willingness to work during Eastern Timezone hours.

• Must be authorized to work in the U.S. without sponsorship; this role is not eligible for visa sponsorship.

• Preferred: experience supporting a SOC 2 audit from readiness through to reporting.

• Preferred: experience with HIPAA or other healthcare compliance requirements.

• Preferred: familiarity with Vanta, Drata, Secureframe, or similar platforms.

• Preferred: experience in responding to client security questionnaires or enterprise diligence requests.

• Preferred: capability to automate workflows using scripting, APIs, or contemporary automation tools.

• Preferred: comfort in submitting pull requests for security patches and dependency updates.

• Preferred: knowledge of AWS, GCP, or Azure cloud identity and security.

• Preferred: experience as an early IT or security hire in a growing startup.

🏝️ Benefits

• Equity grants.

• Retirement plan matching.

• Employer-sponsored medical, dental, and vision insurance plans.

• Opportunity for advancement into senior security, GRC, or IT leadership positions.

• Engaging work alongside dynamic, mission-driven colleagues.

• High-growth startup atmosphere.

• Access to LLM tooling and MCP connections to Vanta and other systems.

• Flexible remote work options.