Senior Enterprise Identity & Zero-Trust Engineer

PhysicsX; New York (NY); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Equity options

401(k) 5% contribution

Free team lunch 1x/week

Private health insurance

Enhanced parental leave

20 days Annual Leave

Personal development support

Gympass/Wellhub

FSA

Job summary

PhysicsX is seeking an experienced security engineer to own Entra ID and zero-trust initiatives in a hybrid New York setting. You will manage MFA, PIM, SCIM provisioning, and IAM governance while coordinating with platform teams to maintain secure cloud postures across AWS, GCP, and Azure.

The role emphasizes SASE-based access control, MDM oversight, and scripting for automation, with a strong focus on compliance (SOC 2, ISO 27001). Join a growing AI-enabled engineering company in New York.

Qualifications

• 5–10 years in enterprise IT/security or identity roles with hands-on Entra ID in production.
• Deep CA policy design experience with risk-based, device-aware rules.
• Experience with Entra ID Governance: Access Reviews, Privileged Identity Management (PIM).
• SSO/SAML/OIDC federation and SCIM provisioning across many enterprise apps.
• Endpoint security tooling: CrowdStrike or Defender for Endpoint.
• Scripting/automation in PowerShell or Python and using Graph API.
• Hybrid identity with Entra Connect or on-prem AD sync.
• Familiar with SOC 2, ISO 27001, FedRAMP; translate controls to implementations.

Responsibilities

• Own Entra ID environment: CA policies, MFA, PIM, SSO/SCIM, and hybrid identity.
• Manage infrastructure as code with Terraform for identity, networking, and security tooling.
• Design zero-trust network access, replacing legacy VPN with SASE-based control.
• Own MDM strategy across macOS/Windows/Linux/Mobile: enrolment, baselines, patching.
• Collaborate with platform/DevOps to align AWS/GCP/Azure security postures.
• Lead access reviews and least-privilege enforcement for audits.

Skills

Entra ID

Azure AD

Zero Trust

MDM

SASE

Terraform

PowerShell

Python

Graph API

Hybrid identity

SCIM provisioning

PIM

SOC 2/ISO 27001

Tools

CrowdStrike

Defender for Endpoint

Terraform

Microsoft Graph API

Job description

PhysicsX is seeking an experienced security engineer to own Entra ID and zero-trust initiatives in a hybrid New York setting. You will manage MFA, PIM, SCIM provisioning, and IAM governance while coordinating with platform teams to maintain secure cloud postures across AWS, GCP, and Azure.

The role emphasizes SASE-based access control, MDM oversight, and scripting for automation, with a strong focus on compliance (SOC 2, ISO 27001). Join a growing AI-enabled engineering company in New York.