Senior Corporate Security Consultant

Amomitto; United States; Remote; USD 75,000 - 125,000; Full time

Job summary

Amomitto is seeking a remote, contract-based security and IT delivery lead for US client engagements. You will own endpoints, identity providers, and SaaS environments, working directly with client teams including VP-level engineers and HR staff.

You will run a hands-on IT operations and security program, including access reviews, awareness training, incident response, and SOC 2/ISO 27001 alignment, with heavy client-facing interaction.

Qualifications

• 5+ years hands-on experience in IT and security delivery.
• Prior consulting or MSP experience with multiple clients.
• Deep MDM experience across Mac and Windows.
• Identity provider administration including SSO, SCIM, and MFA policy.
• SaaS administration across client stacks.
• Experience running a corporate security program (policies, reviews, training, incident response).
• Familiarity with SOC 2 and ISO 27001 requirements.

Responsibilities

• Deploy and manage MDM across Mac and Windows fleets.
• Provision and image endpoints for new hires.
• Build and enforce device compliance policies.
• Roll out and maintain EDR on managed devices.
• Administer identity providers and SSO/SCIM provisioning.
• Connect client SaaS apps to SSO and SCIM.
• Enforce MFA and conditional access policies.
• Onboard and offboard user access.

Skills

5+ years exp

Consulting/MSP exp

MDM experience

Identity provider admin

SaaS administration

Corporate security program

SOC 2 / ISO 27001 knowledge

Client-facing

Tools

Jamf

Kandji

Intune

Okta

Entra ID

Google Workspace

AWS

GCP

Azure

Job description

Remote · Contract · $60–100K base rate + 25% quarterly incentive ($75–125K at target)

The Role

You will be embedded across multiple client engagements as each client's IT and corporate security lead. Our clients are US SaaS, fintech, and healthtech companies without their own IT team, and we act as that team for them. You will own their endpoints, identity provider, and SaaS environment, and work directly with their employees and leadership.

This role is heavily client-facing. Expect daily client calls, shared Slack channels with every client, and requests from every level of the company, from a VP of Engineering planning an EDR rollout to HR needing a laptop provisioned for a new hire.

Most of the work is hands‑on IT administration. The rest is running the corporate security program around it, including access reviews, awareness training, and incident response. Cloud and application security work sits with our Senior Security Consultant role.

What You Will Do

• Deploy and manage MDM (Jamf, Kandji, Intune) across Mac and Windows fleets
• Provision and image endpoints for new hires
• Build and enforce device compliance policies such as disk encryption, OS updates, and screen lock
• Roll out and maintain EDR on managed devices

Identity and access

• Administer identity providers: Okta, Entra ID (Azure AD), and Google Workspace
• Connect client SaaS apps to SSO and SCIM provisioning
• Enforce MFA and conditional access policies
• Run onboarding and offboarding workflows so access is granted and removed on time

SaaS and workplace administration

• Administer SaaS applications across each client's stack and track down unmanaged ones
• Harden Google Workspace and Microsoft 365, including email authentication (SPF, DKIM, DMARC) and external sharing settings
• Manage user access to AWS, GCP, and Azure accounts
• Handle day‑to‑day IT support requests from client employees

Corporate security program

• Write and implement IT and security policies, including acceptable use, access control, and incident response
• Run security awareness training programs
• Lead incident response for lost devices, compromised accounts, and suspicious logins
• Implement the IT controls clients need for SOC 2 and ISO 27001, and produce the evidence auditors ask for

What We Require

• 5+ years of hands‑on experience in IT and security delivery. Project management, sales engineering, and security‑adjacent roles don't count toward this
• Prior consulting or MSP experience is mandatory. You must have supported multiple clients and environments and communicated directly with their stakeholders
• Deep MDM experience: Jamf, Kandji, or Intune, across both Mac and Windows
• Identity provider administration: Okta, Entra ID, or Google Workspace, including SSO, SCIM, and MFA policy
• SaaS administration across a range of client stacks
• Corporate security program experience: you have run policies, access reviews, awareness training, and incident response yourself
• Working knowledge of SOC 2 and/or ISO 27001: you understand what the frameworks require of IT well enough to implement the controls yourself
• Strong client‑facing skills: you are comfortable on a call with a client's VP of Engineering and equally comfortable helping their newest hire who can't get into Okta
• Professional‑level English: written and verbal. You will be on client calls with US‑based teams daily

What Sets You Apart

• You've taken a company from unmanaged devices to a fully enrolled fleet
• You've automated onboarding and offboarding from an HR system through to the identity provider
• You've led the response to a compromised account or lost device from first report to close
• You've worked with US‑based clients
• You have Jamf, Okta, or Microsoft certifications, or broader ones like CISSP (not required, but signals depth)
• Which client engagements from your past are you most proud of, and why?
• Which MDM and identity platforms have you administered, and for how many clients?
• Tell us about an IT or security rollout you led from start to finish.

We don't need a cover letter. We need to understand how you think and what you've actually done.