Staff Enterprise Security Engineer - Hybrid (SF)

US Health Partners, LLC; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Strava is seeking a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and lead its execution. You will assess our current environment, define pragmatic target-state controls, and guide improvements across endpoints, device management, and critical SaaS tools.

You will partner with IAM, IT, and Engineering to implement SSO, MFA, and Zero Trust principles while balancing security with developer velocity in a hybrid, on-site heavy role in San Francisco.

Qualifications

• Experience in enterprise security engineering from assessment to implementation.
• Hands-on experience securing macOS and Windows endpoints with modern tooling.
• Knowledge of SaaS security posture management and CSPM is a plus.

Responsibilities

• Set the technical direction for Enterprise Security, assess the current environment, define target-state controls and maintain a risk-prioritized roadmap.
• Lead improvements across endpoints, device management, browsers, Google Workspace, and critical SaaS integrations.
• Partner with IAM to design and implement SSO, MFA, device trust, and conditional access.
• Build scripts and automation to make controls repeatable and measurable, reducing manual security operations.
• Mentor engineers, advise IT/Engineering, and participate in on-call rotations.
• Document architecture decisions, exceptions, and residual risk for broader teams.

Skills

Enterprise Security

Security Engineering

Endpoint security

IAM & SSO

Zero Trust

Scripting (Python)

Education

Bachelor's degree in Computer Science or related field

Security-related certification (e.g., CISSP, CISM)

Tools

Jamf

Intune

Okta

Chrome Enterprise

ZTNA platforms

Job description

Strava is seeking a Staff Enterprise Security Engineer to set the technical direction for Enterprise Security and lead its execution. You will assess our current environment, define pragmatic target-state controls, and guide improvements across endpoints, device management, and critical SaaS tools.

You will partner with IAM, IT, and Engineering to implement SSO, MFA, and Zero Trust principles while balancing security with developer velocity in a hybrid, on-site heavy role in San Francisco.