Remote Security Compliance Engineer — IAM & SOC 2

Syllo; Oregon; Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Voluntary insurance

Equity options

Paid time off

Job summary

Syllo is seeking a Security Engineer to own the technical security layer of its compliance program, implementing controls across cloud and endpoint environments. You will operate IAM policies, SSO, device management, and security monitoring while coordinating with cross-functional teams.

You will build incident response runbooks, maintain audit-ready documentation, and ensure data segregation in partnership with product engineering.

Qualifications

• 3+ years in security engineering or DevSecOps with hands-on implementation.
• Experience implementing Vanta or comparable compliance tooling.
• Proficiency with cloud security controls in AWS, GCP, or Azure.
• Experience with SSO providers (Okta, Google Workspace) and IAM policy design.
• Bachelor's degree in CS or information security preferred.

Responsibilities

• Own security infrastructure: implement, configure, and monitor SOC 2/ISO 27001 controls (Vanta, SSO, endpoint management, monitoring).
• Design and operate IAM policies, enforce least-privilege access, maintain correct SSO across stack.
• Manage device enrollment, MDM policy, and endpoint compliance for distributed teams.
• Own detection, triage, and technical response; maintain runbooks and coordinate with Director on policy and client-notification dimensions.
• Verify data segregation and enforce customer data isolation in collaboration with product engineering.

Skills

Cloud security controls

Vanta tooling

SSO & IAM design

MDM & endpoint

Incident response

Education

Bachelor's degree in CS/InfoSec

Tools

AWS

GCP

Azure

Okta

Google Workspace

Job description

Syllo is seeking a Security Engineer to own the technical security layer of its compliance program, implementing controls across cloud and endpoint environments. You will operate IAM policies, SSO, device management, and security monitoring while coordinating with cross-functional teams.

You will build incident response runbooks, maintain audit-ready documentation, and ensure data segregation in partnership with product engineering.