Security Engineer: Automate Defense & IAM Controls

Flexport; Berkeley (CA); On-site; USD 165,000 - 202,000; Full time

Benefits offered by this job

Relocation support

Job summary

Flexport is seeking a security engineer based in San Francisco to build automation and security tooling that protects our global platform.

You’ll own identity, endpoint, SaaS posture, and automation, writing code and runbooks to scale security across thousands of engineers.

The role sits in the PSI team; this is not IT support—base salary ranges from $165,375 to $202,125 per year, with relocation support and a collaborative, fast-paced environment.

Qualifications

• 2–5 years of experience in security engineering or related field.
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne).
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and major identity providers (Okta, Entra, Google Workspace).
• Comfort writing real code or scripts (Python, Go) to automate work.
• Clear, practical communicator who can explain controls to engineers, sales, and executives.

Responsibilities

• Identity & access: advance our identity posture with SSO coverage, MFA rollout, and least-privilege access.
• Endpoint & device lifecycle: write and ship device policy as code and improve EDR coverage across fleet.
• SaaS posture: reduce SaaS risk with SSPM tooling and automate configurations for tools like Google Workspace and Slack.
• Automation & enablement: automate repetitive security tasks and write runbooks to empower other teams.

Skills

Endpoint management

EDR tooling

Identity protocols

Programming/scripting

Clear communicator

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a security engineer based in San Francisco to build automation and security tooling that protects our global platform.

You’ll own identity, endpoint, SaaS posture, and automation, writing code and runbooks to scale security across thousands of engineers.

The role sits in the PSI team; this is not IT support—base salary ranges from $165,375 to $202,125 per year, with relocation support and a collaborative, fast-paced environment.