Senior Enterprise Security Engineer - Identity & SaaS

fun.xyz; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Fun is seeking a Senior Corporate Security Engineer to own identity, access, endpoints, SaaS security, and vendor risk at our NYC headquarters. You’ll set baseline security engineering practices and automate controls across Google Workspace, SSO, MFA, and offboarding, with a focus on reducing risk from AI agents and new attack surfaces.

We expect hands-on experience securing macOS fleets, implementing IdP workflows, and communicating tradeoffs to both technical and non-technical stakeholders.

Qualifications

• 5+ years in corporate or enterprise security, preferably at a startup.
• Deep Hands-on experience with IdP (Okta/Entra/Google Workspace) including SSO and SCIM.
• Experience securing macOS fleets with MDM (Jamf/Kandji/Fleet).
• Automation skills using languages like Python or Bash against APIs.
• Familiarity with AI tools and risk management in an enterprise setting.
• Ability to explain tradeoffs to engineers, sales, or executives clearly.

Responsibilities

• Own identity and access including SSO, MFA, and automated provisioning.
• Define and enforce macOS baselines and device health as access controls.
• Harden SaaS security across Slack/Notion/Google Workspace and CRM.
• Run security reviews for vendors and third parties; maintain inventory.
• Lead detection and response for incidents like phishing or account takeover.
• Own SOC 2/compliance controls with automated evidence collection.

Skills

5+ years security

SSO/SCIM/IdP experience

MDM management

Automation scripting

AI risk awareness

Effective communicator

Tools

Okta

Entra ID

Jamf

Python

Job description

Fun is seeking a Senior Corporate Security Engineer to own identity, access, endpoints, SaaS security, and vendor risk at our NYC headquarters. You’ll set baseline security engineering practices and automate controls across Google Workspace, SSO, MFA, and offboarding, with a focus on reducing risk from AI agents and new attack surfaces.

We expect hands-on experience securing macOS fleets, implementing IdP workflows, and communicating tradeoffs to both technical and non-technical stakeholders.