Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
About the role
- IT Security Engineer owning identity, endpoint, email, and access controls. Protecting Alpaca’s global brokerage infrastructure and supporting security incident response.
Responsibilities
- Own security standards and controls protecting workforce identities, endpoints, and critical business systems
- Maintain security standards, measure control effectiveness, and partner with IT on device operations and administration
- Define and maintain SSO and conditional-access standards across cloud, SaaS, and internal systems
- Own phishing-resistant MFA standards and enforcement
- Maintain privileged-access standards, approval policies, and periodic access reviews
- Partner with IT and People teams on timely, complete, and auditable joiner, mover, and leaver access changes
- Own endpoint detection and response policy and tuning
- Maintain device-posture and secure network-access requirements
- Measure identity and endpoint controls and follow up on gaps
- Partner with Security Operations on detections and response playbooks
- Maintain administrator-access security baselines for critical SaaS platforms and vendor accounts
- Assess identity and account impacts of vendor security events
- Own email authentication standards and email security configuration
- Maintain company-domain security and monitor lookalike domains
- Triage reported phishing and coordinate takedowns
- Lead identity, endpoint, and email aspects of security incidents, including account containment
- Participate in the Security Operations on-call rotation after onboarding and cross-training
- Provide IT and employees with guidance on security requirements
- Report to the Enterprise Security Architect and collaborate with IT, DevOps, Engineering, GRC, and the wider Security team
Requirements
- Excited about Alpaca’s mission and what we’re building
- 3+ years of experience in IT security, identity security, or security engineering roles
- Hands-on experience with an identity provider and SSO, including SAML and OIDC
- Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys
- Hands-on experience with an endpoint detection and response platform
- Scripting or automation experience (Python, Bash, or PowerShell)
- Experience with zero-trust network access or device-posture controls
- Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response
- Experience working closely with IT teams and translating security requirements into operational workflows
- Experience investigating identity, endpoint, or email security alerts
- Willing to participate in an on-call rotation
- Strong written and verbal communication skills, especially during incidents
- Comfortable working cross-functionally and handling escalations calmly and decisively
- Experience securing financial, trading, or other highly regulated platforms
- Familiarity with compliance frameworks such as SOC 2 or ISO 27001
- Experience with just-in-time privileged access tools
- Experience securing administrator access to SaaS platforms
- Experience with password managers and secrets management at company scale
- Experience with MDM platforms for macOS and Windows
- Experience with cloud IAM in AWS, GCP, or Azure
- Ability to balance security rigor with operational efficiency and business needs
Benefits
- Competitive Salary & Stock Options
- Health Benefits
- New Hire Home-Office Setup: One-time USD $500
- Monthly Stipend: USD $150 per month via a Brex Card
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Security Engineer building agentic AI workflows and evaluation frameworks for Spotify’s vulnerability management platform. Improving automated security fixes for developers across the music - streaming business.
Avaya Aura security remediation consultant securing enterprise voice environments for Canadian clients. Applying Service Packs, hardening systems, and documenting production changes.
Desjardins security advisor managing ServiceNow SecOps and enterprise vulnerability management. Assessing risks, prioritizing remediation, and guiding IT and business stakeholders.
DNS and email security advisor at Desjardins, a financial cooperative. Deploying DNS, email security, and domain safeguards while troubleshooting complex infrastructure issues.
Staff Software Engineer leading backend architecture for Coalition Control, a cybersecurity risk platform. Building secure distributed services and mentoring Security Engineering teams across Canada.
Head of Security protecting Helius’s Solana developer platform and critical infrastructure. Owning incident response, cloud security, compliance, and security - team growth.
Senior Security Specialist protecting BDO Canada’s enterprise systems through threat detection, incident response, and vulnerability management. Supporting security operations across blended office, client - site, and virtual environments.
Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.