Security Engineer: Identity, Endpoint & SaaS Automation

Flexport; San Francisco (CA); On-site; USD 165,000 - 202,000; Full time

Benefits offered by this job

Relocation support

Competitive salary & benefits

Job summary

Flexport is seeking a security engineer to join the PSI (Platform, Security & Infrastructure) team in San Francisco. You will write code, ship automation, and build detections across identity, endpoints, and SaaS posture.

The role emphasizes practical security engineering, collaboration with IT and product teams, and scalable controls across a global engineering footprint. You will work in a hands-on environment with modern tooling, contributing to proactive security and incident prevention

Qualifications

• 2–5 years in corporate/enterprise security engineering or equivalent.
• Hands-on experience with endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne).
• Familiarity with SSO, MFA, SCIM, and identity providers (Okta, Entra, Google Workspace).
• Proficient in scripting (Python, Go) to automate manual tasks.

Responsibilities

• Identity & access: elevate posture, MFA rollout, SCIM automation, least-privilege access.
• Endpoint & device lifecycle: policy as code, remediation scripts, policy enforcement.
• SaaS posture: reduce risk with SSPM tooling and OAuth governance.
• Automation & enablement: automate non-human tasks and write runbooks.

Skills

Identity protocols (SAML, OIDC, SCIM)

Python or Go scripting

EDR tooling experience

Strong written and verbal communicator

Tools

Jamf

Kandji

Intune

CrowdStrike

SentinelOne

Google Workspace

Job description

Flexport is seeking a security engineer to join the PSI (Platform, Security & Infrastructure) team in San Francisco. You will write code, ship automation, and build detections across identity, endpoints, and SaaS posture.

The role emphasizes practical security engineering, collaboration with IT and product teams, and scalable controls across a global engineering footprint. You will work in a hands-on environment with modern tooling, contributing to proactive security and incident prevention