Enterprise Identity & Zero-Trust Architect

PhysicsX Ltd.; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity options

401(k) contribution

Private health insurance

Free team lunch

Enhanced parental leave

20 days annual leave

Personal development support

Gympass / Wellhub

FSA

Job summary

PhysicsX Ltd. is seeking a senior security/identity engineer to own Entra ID/Azure AD, implement zero-trust and SASE-based access, and drive device management across a mixed-OS fleet. You’ll collaborate with security, platform engineering, and broader teams in a hybrid NY-based role.

You will design identity governance, automate workflows, and align IT security with audits (SOC 2, ISO 27001) while maturing conditional access and MFA strategies across enterprise apps.

Qualifications

• Extensive hands-on ownership of Microsoft Entra ID/Azure AD in production.
• Deep experience designing conditional access policies and risk-based access controls.
• Experience with Entra ID Governance: Access Reviews, Identity Protection, and PIM at scale.
• SSO/SAML/OIDC federation and SCIM provisioning across enterprise apps.
• Endpoint security tooling experience with EDR platforms (CrowdStrike/Defender).
• Scripting/automation abilities in PowerShell or Python to automate identity workflows.
• Experience with hybrid identity (Entra Connect or on-prem AD sync).
• Familiarity with SOC 2 and ISO 27001 controls and translating them into technical implementations.

Responsibilities

• Own and evolve Microsoft Entra ID environment: identity architecture, conditional access, MFA, PIM, SSO/SCIM integrations, and hybrid identity.
• Manage infrastructure as code in Terraform for identity, networking, and security tooling.
• Design and implement zero-trust network access, replacing legacy VPN with SASE-based access control.
• Own MDM strategy and operations across macOS/Windows/Linux/mobile devices: enrollment, baselines, patching, endpoint posture.
• Partner with platform/DevOps teams to keep IT and cloud security postures aligned and consistent.
• Lead access reviews, least-privilege enforcement, and identity governance work to support audits (SOC 2, ISO 27001).

Job description

PhysicsX Ltd. is seeking a senior security/identity engineer to own Entra ID/Azure AD, implement zero-trust and SASE-based access, and drive device management across a mixed-OS fleet. You’ll collaborate with security, platform engineering, and broader teams in a hybrid NY-based role.

You will design identity governance, automate workflows, and align IT security with audits (SOC 2, ISO 27001) while maturing conditional access and MFA strategies across enterprise apps.