Lead Identity & Endpoint Security Engineer - Remote

RemoFirst; South Africa; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Fully remote role

Job summary

RemoFirst is seeking a hands-on Lead-IC to own identity and endpoint security end-to-end. You will design, build, and operate the automation that makes HRIS-driven onboarding/offboarding reliable, with strong emphasis on access governance across multiple apps and device posture gating.

You’ll lead efforts to ensure SOC 2 and ISO 27001 compliance with modern IGA tooling, and implement self-service flows to reduce manual Slack-based requests. A remote-first team collaborates globally.

Qualifications

• Deep hands-on Okta experience as administrator and builder, incl. Workflows, SCIM, custom attribute mappings.
• Built HRIS-driven joiner/mover/leaver automation, including non-cooperating HRIS parts.
• Led an access-governance program that withstood SOC 2/ISO 27001 audits.
• Practical endpoint management experience — Jamf or equivalent — and a view on device posture gating access.
• Able to explain access decisions in terms of risk and business need.

Responsibilities

• Design and build joiner/mover/leaver automation via the Workable API, Okta Workflows, and middleware where needed.
• Own the entitlement model: groups, roles, attributes and propagation of access.
• Handle contractor and EOR cases, future-dated changes, internal transfers, rehires, leaves, and country variations.
• Own access governance across core SaaS estate: Okta, Google Workspace, Slack, Confluence/Jira, Workable, HRIS and 20+ apps.
• Run access reviews and certification campaigns aligned with SOC 2/ISO 27001, ideally on a modern IGA platform.
• Build self-service request-and-approval flows to replace Slack DMs and keep long-tail apps under management.
• Own device fleet in Jamf, tie device posture to access via Okta Device Trust, and improve secure remote access (Tailscale/Cloudflare Zero Trust).
• Be the identity and endpoint interface for SOC 2 and ISO audits; instrument alerts for auth anomalies, MFA changes, and device-compliance drift.
• Write runbooks and ensure fast, provable offboarding.

Skills

Okta expert

HRIS automation

Access governance

Endpoint management

Risk-based access decisions

Tools

Okta

Jamf

Tailscale

Cloudflare

Confluence/Jira

Job description

RemoFirst is seeking a hands-on Lead-IC to own identity and endpoint security end-to-end. You will design, build, and operate the automation that makes HRIS-driven onboarding/offboarding reliable, with strong emphasis on access governance across multiple apps and device posture gating.

You’ll lead efforts to ensure SOC 2 and ISO 27001 compliance with modern IGA tooling, and implement self-service flows to reduce manual Slack-based requests. A remote-first team collaborates globally.