Enterprise Security Engineer - R01573019

Brillio 2; New York (NY); Presencial; USD 120.000 - 170.000; Jornada completa

Descripción de la vacante

Brillio seeks an Enterprise Security Engineer to build secure-by-default environments and drive IaC and GitOps for security operations. You’ll secure endpoints across macOS, Windows, and Linux, automate provisioning and patching, and evaluate AI security guardrails and integrations.

You will design and implement security configurations, manage identity providers (Okta, LDAP, SSO), and collaborate with teams to strengthen enterprise platform security.

Formación

• Experience securing endpoints, managing identities, and AI security within enterprise environments.
• Proficiency in IaC and automation to support security operations.
• Hands-on experience with security configurations and access controls.

Responsabilidades

• Build and secure enterprise technologies including endpoints, SaaS apps, and networks.
• Modernize endpoint management across macOS, iOS, Windows, and Linux.
• Configure security controls for identity providers and enterprise platforms.
• Develop automation for provisioning, patching, and deployments.
• Conduct security assessments, threat modeling, and architecture reviews.

Conocimientos

Endpoint security

Identity management

AI security

Infrastructure as Code

Herramientas

Terraform

Jamf Pro

FleetDM

MDM

OKTA

LDAP

SAML

OAuth

OIDC

EDR

Descripción del empleo

Brillio is a digital technology service provider serving Fortune 1000 companies. This Enterprise Security Engineer role focuses on building secure-by-default environments, modernizing endpoint management across multiple operating systems including Linux, and driving infrastructure-as-code and GitOps practices for enterprise security operations.

What You'll Do

• Build and secure enterprise technologies including SaaS applications, corporate endpoints, office networks, and business/data intelligence platforms
• Modernize endpoint management and identity security across macOS, iOS, Windows, and Linux environments while strengthening architecture and automation
• Manage endpoint and SaaS security configurations using Terraform, version control, CI pipelines, and automated deployments
• Develop automation for secure endpoint provisioning, configuration, patching, and software distribution
• Establish AI security guardrails, evaluate prompt security, review AI-generated applications, and manage approved AI agents
• Conduct security assessments, threat modeling, and architecture reviews for enterprise applications and third-party integrations

What You Need

• Strong practical experience in endpoint security, identity management, AI security, or Infrastructure-as-Code
• Proficiency in Python or Go for developing automation solutions for security operations
• Hands-on experience with Terraform including module design, state management, and CI/CD pipeline deployments
• Experience with endpoint management platforms such as Jamf Pro, FleetDM, MDM, or EDR tools
• Strong knowledge of managing and securing macOS environments at scale and Linux environments
• Experience configuring security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP
• Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols
• Experience with AI security controls, MCP server management, and secure AI integrations

Nice to Have

• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls
• Hands-on experience managing Okta integrations, tools, and MCP environments
• Ability to guide development teams toward secure engineering practices and work effectively with distributed remote teams
• Practical, empathetic, and accountable approach to security engineering with strong interest in emerging security technologies