Security Engineer: Code, Automate & IAM Defenses

Flexport; Denver (CO); On-site; USD 131,000 - 164,000; Full time

Job summary

Flexport is seeking a security engineer to write code and ship automation, focusing on platform, security, and infrastructure. You’ll own identity posture, device policy as code, and EDR coverage while collaborating with teams to reduce risk across SaaS and cloud services.

The role emphasizes automation over manual ticket queues, with opportunities to contribute to scalable security solutions and a modern PSI-driven security program.

Qualifications

• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and major identity providers.
• Comfort writing real code or scripts (Python, Go) to automate repetitive tasks.
• Clear, practical communicator who can explain controls to engineers and non-tech stakeholders.
• 2–5 years of security engineering experience in corporate/enterprise environments.

Responsibilities

• Advance our identity posture: SSO coverage, MFA rollout, SCIM automation, least-privilege access across SaaS and cloud.
• Build detections and guardrails to catch account takeover and MFA fatigue before incidents.
• Write and ship device policy as code across macOS and Windows with rollout and rollback.
• Maintain and improve our EDR stack's detection and response coverage across the fleet.
• Reduce SaaS risk at scale through SSPM tooling and automation; manage security configurations for tools like Google Workspace and Slack.
• Automate non-human security tasks and write runbooks to help the team scale; collaborate with IT and People teams.

Skills

Endpoint management

EDR tooling

Identity protocols

Python/Go scripting

Strong communicator

SAML/SCIM/OIDC

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a security engineer to write code and ship automation, focusing on platform, security, and infrastructure. You’ll own identity posture, device policy as code, and EDR coverage while collaborating with teams to reduce risk across SaaS and cloud services.

The role emphasizes automation over manual ticket queues, with opportunities to contribute to scalable security solutions and a modern PSI-driven security program.