Security Engineer: Identity & Automation Lead

Voiceflow; San Francisco (CA); On-site; USD 165,000 - 202,000; Full time

Job summary

Flexport is hiring a security engineer focused on identity, devices, and SaaS posture. You will drive MFA rollout, automate access lifecycles, and strengthen endpoint protection across the fleet. The role emphasizes practical scripting and clear communication with engineers and leadership.

Based in San Francisco, you will join a team shaping secure, scalable security across a dynamic global company. Expect collaboration across IT, security, and product teams with modern tooling.

Qualifications

• 2–5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne).
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace).
• Comfort writing real code or scripts (Python, Go) to automate tasks.
• Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP.

Responsibilities

• Identity & access: advance identity posture with SSO, MFA rollout, SCIM lifecycle automation, and least-privilege access.
• Build detections and guardrails to catch account takeover, MFA fatigue, and session token theft.
• Endpoint & device lifecycle: write device policy as code across macOS and Windows.
• Maintain and improve our EDR stack's detection and response across the fleet.
• SaaS posture: reduce SaaS risk with SSPM tooling and detect risky OAuth grants.
• Own security configuration for SaaS tools used daily (Google Workspace, Slack).
• Automation & enablement: automate non-human parts like provisioning and access reviews.
• Write runbooks and documentation to empower the team.

Skills

Identity protocols

EDR tooling

Python/Go scripting

Clear communication

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is hiring a security engineer focused on identity, devices, and SaaS posture. You will drive MFA rollout, automate access lifecycles, and strengthen endpoint protection across the fleet. The role emphasizes practical scripting and clear communication with engineers and leadership.

Based in San Francisco, you will join a team shaping secure, scalable security across a dynamic global company. Expect collaboration across IT, security, and product teams with modern tooling.