Senior IT Security Engineer
Alloy · New York City
About this role
**Alloy is where you belong!** Alloy is the AI-powered identity and fraud prevention platform that accelerates onboarding, stops fraud, and scales compliance across the customer lifecycle so financial organizations can grow without limits. More than 900 of the world’s leading financial institutions and fintechs trust Alloy for smarter risk management that drives growth. --- ## About the Team The IT and Security team controls who and what can reach Alloy’s systems—from employee laptops to SaaS tools and AI agents. Our customers are banks and fintechs, and our **ISO 27001** and **SOC 2** programs depend on access controls that hold up under audit. Alloy operates in a **hybrid-work** environment. For this internal client-facing role, the in-person office attendance requirement is **4 days per week (Tuesday–Thursday)**, with your choice on whether the fourth in-person day is **Monday or Friday**. --- ## What You’ll Do (Senior IT Security Engineer) You’ll own **workforce identity** at Alloy—from how access is granted and automated to how it is reviewed and removed. You’ll be the primary expert for **Okta**, **SaaS access**, and **identity automation**, while sharing coverage for broader IT and Security work. **Key responsibilities:** - **IAM & Okta Administration:** Primary SME for workforce identity and access management (Okta groups, policies, app assignments, admin roles, MFA, authentication controls) - **SaaS Access & Integrations:** Manage SaaS access and onboarding; implement/maintain **SSO (SAML/OIDC)**, **SCIM provisioning/deprovisioning**, and **Google Workspace** access - **Identity Lifecycle & Automation:** Maintain/improve joiner/mover/leaver workflows from HRIS → IdP → downstream SaaS; use **Okta Workflows** and automation to reduce manual access work - **Access Operations:** Troubleshoot authentication/provisioning issues; administer temporary access/exceptions; improve reliability and efficiency of access requests - **RBAC Management:** Refine and evolve Alloy’s role/attribute-based access control approach - **Privileged Access Management:** Mature **PAM/TPAM** for admin and production access (JIT/temporary access and break-glass) - **Non-Human Identity Management:** Improve lifecycle controls for service accounts, system users, API credentials/tokens, OAuth apps, bots, and integrations - **AI Identity & Access:** Shape identity and delegated-access controls for AI platforms/agents/MCP integrations (scope of tool/agent access) - **Access Governance & Compliance:** Strengthen least privilege; run access & privileged-access reviews; remediate stale/orphaned accounts; enforce contractor access expiration; provide IAM evidence for **ISO 27001** and **SOC 2** - **Shared IT/Security Engineering:** Support endpoint security, EDR, DLP, application control, email security, SaaS/security tools, and other IT/Security projects - **Incident Response & Collaboration:** Investigate incidents involving identity/users/endpoints/email/SaaS; coordinate with teammates and business partners; keep processes/documentation clear - **On-call Rotation:** Join IT & Security on-call for critical alerts and urgent after-hours support --- ## What We’re Looking For **Must-haves:** - Hands-on IT/security engineering experience with significant responsibility for **Okta** or a comparable workforce identity provider - Experience administering IdP groups, access/authentication policies, SaaS app assignments, MFA, and admin roles - Experience implementi
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.