Senior Security Engineer: Corporate IAM & Endpoint Security

depthfirst Inc.; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Health, vision, and dental insurance

Office lunch and dinner (SF office)

Equity and growth opportunities

Job summary

depthfirst is building security AI to protect our software. As one of our first security engineers, you will own corporate security, protect identities, devices, and enterprise apps, and build tooling and automation to scale security by default.

You will strengthen workforce identity and access management with Okta and SSO, enforce least privilege, and automate provisioning and removal. You will also secure endpoints via MDM and EDR, and set safe configurations for core apps.

Qualifications

• Experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.
• Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.
• Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.
• Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.
• Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Responsibilities

• Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.
• Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.
• Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.
• Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.
• Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

Skills

Security engineering

Internal tooling

Communication

Tools

Okta

SSO

MFA

SAML

OIDC

SCIM

MDM

EDR

OAuth

Job description

depthfirst is building security AI to protect our software. As one of our first security engineers, you will own corporate security, protect identities, devices, and enterprise apps, and build tooling and automation to scale security by default.

You will strengthen workforce identity and access management with Okta and SSO, enforce least privilege, and automate provisioning and removal. You will also secure endpoints via MDM and EDR, and set safe configurations for core apps.