Remote IT Security Engineer - IAM, MFA & Endpoint Security

Diagram; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive Salary & Stock Options

Health Benefits

New Hire Home-Office Setup: USD 500

Monthly Stipend: USD 150 per month

Job summary

Alpaca is seeking an IT Security Engineer to own security standards for workforce identities, endpoints, and critical systems. You will define IAM and SSO standards, enforce phishing-resistant MFA, and lead incident response for identity, endpoint, and email security across a fully remote, distributed team.

The role collaborates with IT, DevOps, Engineering, GRC, and Security teams, reporting to the Enterprise Security Architect. Join a global, high-impact security function.

Qualifications

• 3+ years in IT security, identity security, or security engineering.
• Hands-on with an identity provider and SSO (SAML/OIDC).
• Experience enforcing phishing-resistant MFA (FIDO2 or hardware keys).
• Hands-on with an endpoint detection and response platform.
• Scripting or automation experience (Python, Bash, PowerShell).
• Knowledge of email authentication (SPF, DKIM, DMARC).
• Experience with zero-trust network access or device posture controls.
• Willing to participate in an on-call rotation.
• Ability to translate security requirements into operational workflows.

Responsibilities

• Identity and access security: define and maintain SSO standards and conditional access.
• Manage MFA, privileged access, joiner/mover/leaver processes.
• Endpoint and email security: oversee EDR policy, device posture, and domain protection.
• Measure and improve control effectiveness; coordinate with Security Ops.
• Lead incident response for identity, endpoint, and email aspects; on-call rotation.

Skills

IT security

Identity security

SSO (SAML/OIDC)

FIDO2 hardware keys

Endpoint protection

Scripting (Python/Bash/PowerShell)

Zero-trust / device posture

Email authentication (SPF/DKIM/DMARC)

On-call readiness

Cross-functional collaboration

Tools

EDR platform

Just-in-time privileged access tools

Cloud IAM (AWS/GCP/Azure)

Zero-trust network access solutions

Secrets management tools

Job description

Alpaca is seeking an IT Security Engineer to own security standards for workforce identities, endpoints, and critical systems. You will define IAM and SSO standards, enforce phishing-resistant MFA, and lead incident response for identity, endpoint, and email security across a fully remote, distributed team.

The role collaborates with IT, DevOps, Engineering, GRC, and Security teams, reporting to the Enterprise Security Architect. Join a global, high-impact security function.