Security Engineer: Identity & Endpoint Automation

Flexport; California; On-site; USD 165,000 - 202,000; Full time

Job summary

Flexport is seeking a Security Engineer in San Francisco to design and ship automation for identity, access, and endpoint policy across macOS and Windows. You will build detections, guardrails, and SaaS posture controls while writing runbooks and collaborating with IT and People teams.

Ideal candidates bring 2–5 years in enterprise security engineering, hands-on experience with EDR tooling, and code skills (Python/Go) to automate workflows. Relocation is supported for the right person.

Qualifications

• 2–5 years in corporate, enterprise, or IT security engineering.
• Hands-on experience with endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne).
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace).
• Comfort writing real code or scripts (Python, Go) to automate workflows.
• Clear, practical communicator who can explain a control tradeoff to engineers and leaders.

Responsibilities

• Identity & access management improvements: SSO, MFA rollout, SCIM automation, least privilege across SaaS and cloud estate.
• Build detections and guardrails to catch account takeover and token theft before incidents.
• Endpoint lifecycle: policy as code, config profiles, remediation scripts, rollout with rollback.
• SaaS posture: detect risky grants, shadow IT, and drift across critical apps; own security configuration.
• Automation: automate provisioning, access reviews, vendor questionnaires; write runbooks.

Skills

EDR tooling

Endpoint management

Identity protocols

Python

Go

SAML

OIDC

SCIM

Okta

Entra

Google Workspace

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Terraform

Job description

Flexport is seeking a Security Engineer in San Francisco to design and ship automation for identity, access, and endpoint policy across macOS and Windows. You will build detections, guardrails, and SaaS posture controls while writing runbooks and collaborating with IT and People teams.

Ideal candidates bring 2–5 years in enterprise security engineering, hands-on experience with EDR tooling, and code skills (Python/Go) to automate workflows. Relocation is supported for the right person.