> Markdown version of [/jobs/ext/4199432-senior-it-security-engineer](https://www.wearedevelopers.com/jobs/ext/4199432-senior-it-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior IT Security Engineer

- **Company:** All Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $162,000.0 - $190,000.0
- **Contract:** Temporary contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Artificial Intelligence, User Authentication, Software as a Service, Cloud Computing Security, Cyber Security, Human Resources Information System (HRIS), Identity and Access Management, OAuth, OpenID, Role-Based Access Control, Security Assertion Markup Language (SAML), Systems Integration, Okta, Software Troubleshooting, Agentic-AI, HR Software, AI Platforms, Bots, Gsuite
- **Published:** October 31, 2026
- **Apply:** https://www.dice.com/job-detail/5197f7ae-104f-41c0-b5ea-5ba65c7853fc

## About the Role

Must-haves:

 * Hands-on experience in IT or security engineering, with significant responsibility for Okta or a comparable workforce identity provider
 * Experience administering IdP groups, access and authentication policies, SaaS application assignments, MFA, and administrative roles
 * Experience implementing and troubleshooting SAML/OIDC SSO, SCIM provisioning, and OAuth-based integrations
 * Experience running employee and contractor identity lifecycles across HR systems, an IdP, Google Workspace, and downstream SaaS applications
 * Ability to automate access workflows using Okta Workflows, APIs, scripts, or comparable tools
 * Understanding of least privilege, RBAC/ABAC, access reviews, and account lifecycle controls
 * Working familiarity with endpoint security, EDR, DLP, email security, and SaaS security tooling, and willingness to work beyond IAM
 * Strong troubleshooting, documentation, and communication skills in a shared-responsibility IT/Security team

Nice-to-haves:

 * Experience with temporary privileged access management platforms
 * Experience governing non-human identities, service accounts, API credentials, and OAuth applications
 * Familiarity with identity and delegated access for AI tools, agents, and MCP integrations
 * Experience with ISO 27001 or SOC 2 controls in a fintech, SaaS, or other regulated environment

## Description

You'll own workforce identity at Alloy, from how access is granted and automated to how it is reviewed and removed. You'll be the primary expert for Okta, SaaS access, and identity automation while sharing coverage for broader IT and Security work.

 * IAM and Okta Administration: Serve as the primary technical SME for workforce identity and access management, including Okta groups, policies, application assignments, admin roles, MFA, and authentication controls.
 * SaaS Access and Integrations: Manage SaaS access and application onboarding. Implement and maintain SSO integrations using SAML/OIDC, SCIM provisioning and deprovisioning, and Google Workspace access.
 * Identity Lifecycle and Automation: Maintain and improve employee and contractor joiner/mover/leaver workflows from our HRIS through our IdP and downstream SaaS. Use Okta Workflows and other automation to cut manual access processes.
 * Access Operations: Troubleshoot authentication and provisioning issues, administer temporary access and exceptions, and make access requests more reliable and efficient.
 * RBAC Management: Refine, manage, and evolve Alloy's approach to role and attribute based access control.
 * Privileged Access Management: Mature PAM/TPAM for administrator and production resource access, including just-in-time and temporary access and break-glass procedures.
 * Non-Human Identity Management: Improve ownership and lifecycle controls for service accounts, system users, API credentials and tokens, OAuth applications, bots, and integrations.
 * AI Identity and Access: Shape identity and delegated-access controls for AI platforms, AI agents, and MCP integrations, including the scope of access available to tools and agents.
 * Access Governance and Compliance: Strengthen least privilege and RBAC/ABAC, run access and privileged-access reviews, remediate stale or orphaned accounts, enforce contractor access expiration, and provide IAM evidence for ISO 27001 and SOC 2.
 * Shared IT/Security Engineering: Take on endpoint security, EDR, DLP, application control, email security, SaaS/security tools, and other IT/Security projects within a shared-SME and backup-coverage model.
 * Incident Response and Collaboration: Investigate incidents involving identity, users, endpoints, email, and SaaS. Coordinate with teammates and business partners, and keep processes and documentation clear.
 * On-call Rotation: Join the IT and Security on-call rotation, responding to critical alerts and urgent after-hours support requests.