Security Engineer: IAM & Automation Lead

Flexport; Seattle (WA); On-site; USD 147,000 - 184,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Flexible time off

Job summary

Flexport is seeking a security engineer to write code and ship automation, not service tickets. You will own identity posture, end-user device policy, and SaaS security configurations, while enhancing our EDR capabilities across a global fleet.

You’ll work within the PSI team to automate security tasks, write runbooks, and scale controls with minimal friction, partnering with IT and People teams to protect our global operations.

Qualifications

• 2–5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider.
• Comfort writing real code or scripts (Python, Go) to replace manual, ticket-driven work with automation.
• Clear, practical communicator who can explain a control tradeoff to diverse stakeholders.

Responsibilities

• Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before they turn into incidents.
• Write and ship device policy as code across macOS and Windows with staged rollout and rollback built in.
• Maintain and improve our EDR stack's detection and response coverage across the fleet.

Skills

Identity protocols

Programming skills

EDR experience

Communication

Security engineering

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a security engineer to write code and ship automation, not service tickets. You will own identity posture, end-user device policy, and SaaS security configurations, while enhancing our EDR capabilities across a global fleet.

You’ll work within the PSI team to automate security tasks, write runbooks, and scale controls with minimal friction, partnering with IT and People teams to protect our global operations.