Senior IT Security Engineer — IAM & Endpoint Guardian

Nintendo of America Inc.; Redmond (WA); On-site; USD 145,150 - 261,200; Full time

Job summary

Nintendo Technology Development in Redmond, WA is seeking a Senior Engineer, IT Security to own and evolve security for our M365 tenant, drive IAM operations, and harden endpoint security across Windows, macOS, and Linux. You will design, implement, and operate controls with measured outcomes, partnering with Nintendo Co., Ltd.

and Nintendo of America teams. Responsibilities include implementing Entra Conditional Access, MFA/SSPR, RBAC models, data governance, incident response, and automation;

Qualifications

• 8+ years in enterprise IT/Security engineering with deep hands‑on experience in: M365 administration, IAM operations, or endpoint security.
• Expert‑level experience with: M365 & Entra ID (Conditional Access, MFA/SSPR, PIM/PAM, app registrations, service principals, identity lifecycle); Endpoint Security (CrowdStrike Falcon or equivalent across Windows, macOS, Linux); Logging/SIEM (Splunk).
• Strong automation skills: PowerShell, Python, REST/Graph APIs; CI/CD and Git.
• Proven track record delivering secure baselines at scale (Intune/Jamf/MDM), and leading incident response on identity and endpoints.
• Deep understanding of Zero Trust, least privilege, RBAC, OAuth/OIDC, and modern auth (MSAL).
• Experience with compliance control design and audit support.
• Fluency in Japanese a plus; Bachelor's or Master’s in Engineering/IT or related field.

Responsibilities

• M365 Tenant, Identity & Access Management: implement Entra CA, security defaults, MFA/SSPR, privileged access policies, and MFA step‑up at scale.
• Operate and harden Entra ID (Azure AD): lifecycle governance, automated provisioning/deprovisioning, privileged identities, app registrations, consent reviews.
• Build and maintain RBAC/least‑privilege models for cloud/SaaS apps; Just‑In‑Time admin access.
• Integrate HRIS and identity sources for Joiner‑Mover‑Leaver flows; govern data and collaboration controls.
• Design monitoring/alerts/SLAs for tenant/identity services; lead IR playbooks with IT Security Operations.
• Endpoint security: migrate to robust solution (CrowdStrike), OS baselines, policy tuning, threat hunting.
• Automation & Engineering Excellence: create self‑service tooling; IaC for policy‑as‑code; document runbooks and architectures.
• Compliance & Risk: map controls to SOX/J‑SOX; conduct access reviews and audits; tabletop exercises.

Job description

Nintendo Technology Development in Redmond, WA is seeking a Senior Engineer, IT Security to own and evolve security for our M365 tenant, drive IAM operations, and harden endpoint security across Windows, macOS, and Linux. You will design, implement, and operate controls with measured outcomes, partnering with Nintendo Co., Ltd.

and Nintendo of America teams. Responsibilities include implementing Entra Conditional Access, MFA/SSPR, RBAC models, data governance, incident response, and automation;