Security and Identity Infrastructure Lead (Fully Remote)

Sofar Ocean; United States; Remote; USD 150,000 - 200,000; Full time

Benefits offered by this job

Equity

Health, dental, vision

401(k)

Flexible PTO

Learning stipend

Visa sponsorship

Job summary

Sofar Ocean is building the world’s largest real-time ocean sensor network and seeks a security leader to own identity infrastructure, device management, and compliance operations. You’ll drive Google Workspace, SSO/SCIM, MDM/EDR, and access reviews for a startup around 100 people in San Francisco.

You’ll collaborate with partners and vendors to keep security operations running and manage audits for SOC 2 and ISO 27001, while shaping policies and security reviews across the organization.

Qualifications

• 5+ years in IT systems, corporate security, or security engineering.
• Hands-on experience with Google Workspace, SSO/SCIM, MDM, EDR, AWS IAM, and scripting in Python.
• Clear perspective on security for a ~100-person startup and experience going through SOC 2 or ISO 27001 audits.

Responsibilities

• Lead identity and access: automate joiner/mover/leaver, run access reviews, roll out SSO/SCIM across SaaS tools.
• Manage endpoints: device management, EDR, and compliance policies, tune and triage SIEM detections.
• Lead compliance: maintain policies, operate compliance platform, collect audit evidence, support SOC 2 and ISO 27001 efforts.

Skills

Google Workspace

SSO/SCIM

MDM

EDR

AWS IAM

Python scripting

Tools

Python

Job description

• You'll lead Sofar's corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
• You'll drive the security compliance program and be the internal point person for customer security reviews.
• You'll collaborate with the managed IT partner and external vendors to keep security operations running smoothly.

What You'll Do:

• Own identity and access: automate joiner/mover/leaver processes, run access reviews, and roll out SSO/SCIM across SaaS tools.
• Manage endpoints: device management, EDR, and compliance policies, plus tune and triage SIEM detections.
• Lead compliance: maintain policies, operate compliance platform, collect audit evidence, and support SOC 2 and ISO 27001 efforts.

What You Bring:

• 5+ years in IT systems, corporate security, or security engineering, ideally at a startup.
• Hands-on experience with Google Workspace, SSO/SCIM, MDM, EDR, AWS IAM, and scripting in Python.
• Clear perspective on security for a ~100-person startup and experience going through SOC 2 or ISO 27001 audits.
• Competitive base salary ($150k-$200k) plus equity.
• Medical, dental, and vision coverage, 401(k), and flexible PTO.
• Learning and development stipend and visa sponsorship support.

Sofar Ocean

Sofar Ocean is building the world's largest real-time ocean sensor network, using Spotter buoys and software like Wayfinder to turn ocean data into decisions for shipping, government, and defense customers. The company is a team of about 100 based in San Francisco and is growing fast.