Senior Enterprise Security Architect (Hybrid, SF)

Strava; United States; Hybrid; USD 180,000 - 240,000; Full time

Job summary

Strava is seeking a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and drive improvements across endpoints, identity, Google Workspace, and critical SaaS tools.

You will partner with IAM, IT, and Engineering to balance security with developer velocity, lead architecture decisions, and mentor other engineers in a fast-growing, hybrid environment.

Qualifications

• Extensive enterprise security engineering experience.
• Experience securing macOS and Windows with EDR/MDM.
• Experience hardening Google Workspace and SaaS apps.
• Strong knowledge of SSO, MFA, and Zero Trust.

Responsibilities

• Own the technical strategy for Enterprise Security and roadmap.
• Harden endpoints and configure device management and browser controls.
• Secure Google Workspace and critical SaaS apps.
• Lead OAuth and third-party app governance.
• Design and implement SSO, MFA, and access controls.
• Automate security controls with scripts and APIs.
• Support IT and Engineering with security design.
• Participate in on-call rotation.

Skills

MacOS security

Windows security

EDR & MDM

OAuth governance

Zero Trust

Python scripting

Tools

Jamf

Intune

Okta

Chrome Enterprise

ZTNA platforms

Job description

Strava is seeking a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and drive improvements across endpoints, identity, Google Workspace, and critical SaaS tools.

You will partner with IAM, IT, and Engineering to balance security with developer velocity, lead architecture decisions, and mentor other engineers in a fast-growing, hybrid environment.