IT Security Engineer

We are seeking an IT Security Engineer to own the security standards and controls that protect Alpaca’s workforce identities, endpoints, and critical business systems. The scope includes identity and access management, single sign-on, privileged access, multi-factor authentication, endpoint security, secure network access, and email security.

You will maintain those standards, measure how the controls are working, and partner with IT, who run devices and day-to-day administration.

This role reports to the Enterprise Security Architect and works closely with IT, DevOps, Engineering, GRC, and the wider Security team.

The Security Team is 100% distributed and remote.

Things You Get To Do:

The core responsibilities of the IT Security Engineer are focused on identity security, endpoint security, email and domain protection, and measurable control enforcement.

Identity and Access Security:

• IAM and SSO Standards: Define and maintain security standards for SSO and conditional access across cloud, SaaS, and internal systems.
• Multi-Factor Authentication: Own multi-factor authentication standards, including phishing-resistant methods, and keep them enforced.
• Privileged Access: Maintain privileged-access standards, approval policies, and periodic access reviews with system owners.
• Joiner, Mover, Leaver: Partner with IT and People teams so access changes are timely, complete, and auditable.

Endpoint, Email, and Domain Security:

…