Security Engineer — IAM, EDR & Automation

Flexport; New York (NY); On-site; USD 147,000 - 184,000; Full time

Job summary

Flexport is seeking a Security Engineer in the United States to advance enterprise identity and access management. You will implement SSO, phishing-resistant MFA, and SCIM lifecycle automation across SaaS and cloud services.

You will build detections, write device policy as code for macOS and Windows, and maintain EDR coverage across the fleet while reducing SaaS risk at scale. This role requires clear communication and practical automation skills.

Qualifications

• Typically 2–5 years of enterprise security engineering experience.
• Experience with endpoint management and EDR tooling.
• Familiarity with identity protocols (SAML, OIDC, SCIM).

Responsibilities

• Implement MFA rollout, SSO, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Develop detections and guardrails for account takeover and session token theft.
• Write device policy as code—configuration profiles, remediation scripts, and enforcement rules for macOS and Windows.
• Maintain and improve our EDR stack's detection and response coverage across devices.
• SaaS posture management to reduce SaaS risk at scale, including dangerous OAuth grants and shadow IT.
• Own security configuration for SaaS tools (Google Workspace, Slack) and integrate AI agents and MCP tools.
• Automate device provisioning, access reviews, and security questionnaires to scale headcount.
• Write runbooks and collaborate with IT/People teams to ship frictionless controls.

Skills

Identity protocols

Scripting

Communication

Automation

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a Security Engineer in the United States to advance enterprise identity and access management. You will implement SSO, phishing-resistant MFA, and SCIM lifecycle automation across SaaS and cloud services.

You will build detections, write device policy as code for macOS and Windows, and maintain EDR coverage across the fleet while reducing SaaS risk at scale. This role requires clear communication and practical automation skills.