Security Engineer — Automation & Identity Protection

Flexport; Bellevue (WA); On-site; USD 147,000 - 184,000; Full time

Job summary

Flexport is hiring a security engineer focused on building automation and robust security controls. You will contribute to identity protection, device policy as code, and security tooling across endpoints and SaaS apps.

The role emphasizes shipping code and automation rather than helpdesk tasks, with strong collaboration across PSI teams. The team owns foundational security infrastructure and tooling, providing engineers with secure, scalable environments.

Qualifications

• 2–5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider.

Responsibilities

• Advance our identity posture with SSO, MFA, and SCIM automation.
• Build detections and guardrails to stop account takeover and token theft.
• Write and ship device policy as code for macOS and Windows; maintain EDR coverage.
• Reduce SaaS risk via SSPM tooling and governance; own security configurations for SaaS tools.

Skills

SSO & MFA

EDR tooling

Identity protocols

Scripting (Python/Go)

Clear communicator

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is hiring a security engineer focused on building automation and robust security controls. You will contribute to identity protection, device policy as code, and security tooling across endpoints and SaaS apps.

The role emphasizes shipping code and automation rather than helpdesk tasks, with strong collaboration across PSI teams. The team owns foundational security infrastructure and tooling, providing engineers with secure, scalable environments.