Remote opportunity at
AlloySenior IT Security Engineer
Alloy is seeking a Senior IT Security Engineer to join its team on a full-time basis. Alloy operates an AI-powered identity and fraud prevention platform that…
Career Tools
About This Role
Alloy is seeking a Senior IT Security Engineer to join its team on a full-time basis. Alloy operates an AI-powered identity and fraud prevention platform that supports financial institutions and fintech companies with onboarding, compliance, and risk management. In this role, the engineer will manage workforce identity systems, control access to infrastructure, and collaborate within a shared-responsibility IT and security department. The position offers a salary between USD 162,000 and…
Job Description
Alloy is seeking a Senior IT Security Engineer to join its team on a full-time basis. Alloy operates an AI-powered identity and fraud prevention platform that supports financial institutions and fintech companies with onboarding, compliance, and risk management. In this role, the engineer will manage workforce identity systems, control access to infrastructure, and collaborate within a shared-responsibility IT and security department. The position offers a salary between USD 162,000 and 190,000 per year, accompanied by stock options and various health and wellness perks.
The successful candidate will take charge of identity lifecycle management, single sign-on integrations, and access governance to maintain rigorous audit standards for SOC 2 and ISO 27001 compliance. Duties span across Okta administration, SaaS provisioning, role-based access control, privileged access management, non-human identity oversight, and emerging AI tool security. Additionally, the team member will handle endpoint security tooling, participate in incident response efforts, and join an on-call rotation to address urgent technical requests.
Responsibilities
- Manage workforce identity and access control through Okta, including groups, policies, authentication controls, and multi-factor authentication
- Oversee SaaS application onboarding and configure SAML/OIDC SSO, SCIM provisioning, and Google Workspace access
- Automate employee and contractor joiner, mover, and leaver workflows across human resources systems, identity providers, and connected applications
- Troubleshoot authentication problems, manage temporary access permissions, and refine role and attribute-based access controls
- Mature privileged access management frameworks for administrative and production environments
- Monitor and govern service accounts, API credentials, OAuth applications, and access controls for AI platforms
- Gather identity and access management evidence to support ISO 27001 and SOC 2 audits
- Participate in endpoint security, email protection, Data Loss Prevention, and incident investigation tasks
- Take part in an on-call rotation to handle critical alerts and after-hours support
Requirements
- Hands-on background in IT or security engineering with substantial ownership of a workforce identity provider like Okta
- Experience administering identity provider policies, user groups, SaaS assignments, and administrative roles
- Familiarity with implementing and troubleshooting SAML and OIDC single sign-on, SCIM, and OAuth integrations
- Demonstrated ability to run identity lifecycles across HR systems, identity providers, and business software
- Skill in automating access processes using tools like Okta Workflows, application programming interfaces, or scripts
- Knowledge of least privilege principles, access reviews, account lifecycles, and role-based access control
- Working familiarity with endpoint detection and response, data loss prevention, email protection, and security tooling
- Strong communication, documentation, and troubleshooting capabilities
Qualifications
- Experience utilizing temporary privileged access management platforms
- Background in governing non-human identities, application programming interface credentials, and service accounts
- Familiarity with identity and delegated access controls for artificial intelligence tools, agents, and Model Context Protocol integrations
- Prior exposure to SOC 2 or ISO 27001 compliance frameworks within a regulated industry, Software as a Service, or financial technology sector
Core Skills
Benefits
- Unlimited paid time off and a flexible work policy
- Employee stock options via incentive stock options
- Medical, dental, and vision insurance plans featuring Health Savings Account contributions and Flexible Spending Account options
- Four hundred one k retirement plan with a 100 percent employer match up to 4 percent of annual compensation
- Sixteen weeks of paid parental leave for eligible new parents
- Home office stipend provided to new personnel
- Annual learning and development stipend
- Well-being benefits providing access to ClassPass, OneMedical, UrbanSitter, and Spring Health
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary for the Senior IT Security Engineer role?
The starting base compensation range is specified as USD 162,000 to 190,000 per year, with actual pay depending on factors like experience, skills, knowledge, and location.
What employment type is this position?
This is a full-time employment position.
What are the core duties required in this job?
The role involves owning workforce identity at Alloy, administering Okta, managing SaaS access and integrations, automating identity lifecycles, governing privileged and non-human access, supporting ISO 27001 and SOC 2 audits, and participating in shared IT security engineering and on-call rotations.
What benefits and perks are included?
Benefits include unlimited paid time off, employee stock options, medical, dental, and vision plans with employer HSA contributions, a 401(k) match up to 4 percent, 16 weeks of paid parental leave, a home office stipend, a learning and development stipend, and well-being program access.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.