Security Engineer: Identity & Automation Lead

Flexport; United States; Remote; USD 131,000 - 202,000; Full time

Job summary

Flexport is seeking a security engineer to build and ship security automation across endpoints, IAM, and SaaS configurations. You’ll craft policy as code, automate repetitive tasks, and strengthen defenses as the company scales globally.

You’ll work with Jamf, Intune, and EDR tools to protect devices and data, while collaborating with IT and security teams to ship reliable controls and clear runbooks.

Qualifications

• 2–5 years in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling.
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider.
• Comfort writing real code or scripts (Python, Go) to automate.
• Clear, practical communicator who can explain a control tradeoff.

Responsibilities

• Advance our identity posture: SSO coverage, MFA rollout, SCIM lifecycle automation, least-privilege access.
• Build detections and guardrails to catch account takeover, MFA fatigue, and session token theft.
• Write and ship device policy as code for macOS and Windows with rollout/rollback.
• Maintain and improve our EDR stack’s detection and response coverage across the fleet.
• Reduce SaaS risk at scale through SSPM tooling and automation and manage SaaS configurations.
• Automate security tasks to scale and write runbooks to raise team capability.

Skills

Endpoint management

EDR tooling

Identity protocols

Python/Go scripting

Clear communicator

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Job description

Flexport is seeking a security engineer to build and ship security automation across endpoints, IAM, and SaaS configurations. You’ll craft policy as code, automate repetitive tasks, and strengthen defenses as the company scales globally.

You’ll work with Jamf, Intune, and EDR tools to protect devices and data, while collaborating with IT and security teams to ship reliable controls and clear runbooks.