Member of Security Staff IT Engineer

You will set the technical direction for identity, endpoint, and access management. You will design access controls, manage the Apple endpoint fleet, extend entitlement models to production systems, automate operational work, document runbooks, lead onboarding and offboarding, and partner on device trust and privileged access.

Responsibilities

• Design the identity and access model, including SSO, SCIM, group and role design, lifecycle automation, and access reviews
• Own endpoint strategy, enrollment, compliance baselines, patching, and lifecycle management
• Set security posture across enterprise, developer, and production systems
• Extend entitlement management to developer and data platforms
• Automate manual requests using appropriate tools and scripting languages
• Create runbooks, escalation paths, and documentation
• Own onboarding and offboarding, including compliance evidence
• Partner on device trust, conditional access, and privileged access

Requirements

• Deep current hands-on IT and security engineering experience
• Experience owning identity and endpoint-management architecture
• Identity management experience with Okta or a comparable platform
• Experience automating operational work
• Endpoint management experience with Intune, Jamf, or equivalent and endpoint security agents
• Knowledge of least privilege, conditional access, device trust, privileged access, and audit requirements
• Experience managing production and developer access
• Hands-on use of AI tooling for building, scripting, and troubleshooting
• Experience improving partially built and undocumented environments

Benefits

• Medical benefits
• Dental benefits
• Vision benefits
• Additional health and wellness support programs