Alpaca IT Security Engineer at Alpaca responsible for security standards protecting workforce identities, endpoints, and critical business systems. Focus on identity and access management, multi-factor authentication, and privileged access.
Responsibilities
We are seeking an IT Security Engineer to own the security standards and controls that protect Alpaca’s workforce identities, endpoints, and critical business systems. The scope includes identity and access management, single sign-on, privileged access, multi-factor authentication, endpoint security, secure network access, and email security.
This role reports to the Enterprise Security Architect and works closely with IT, DevOps, Engineering, GRC, and the wider Security team.
The Security Team is 100% distributed and remote.
Things You Get To Do:
The core responsibilities of the IT Security Engineer are focused on identity security, endpoint security, email and domain protection, and measurable control enforcement.
Identity and Access Security:
IAM and SSO Standards: Define and maintain security standards for SSO and conditional access across cloud, SaaS, and internal systems.
Multi-Factor Authentication: Own multi-factor authentication standards, including phishing-resistant methods, and keep them enforced.
Privileged Access: Maintain privileged-access standards, approval policies, and periodic access reviews with system owners.
Joiner, Mover, Leaver: Partner with IT and People teams so access changes are timely, complete, and auditable.
Endpoint, Email, and Domain Security:
EDR Policy: Own endpoint detection and response policy and tuning, with IT handling deployment.
Qualification
3+ years of experience in IT securityExperience investigating identity
Required
Excited about Alpaca’s mission and what we’re building
3+ years of experience in IT security, identity security, or security engineering roles
Hands-on experience with an identity provider and SSO, including SAML and OIDC
Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys
Hands-on experience with an endpoint detection and response platform
Scripting or automation experience (Python, Bash, or PowerShell)
Experience with zero-trust network access or device-posture controls
Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response
Experience working closely with IT teams and translating security requirements into operational workflows
Experience investigating identity, endpoint, or email security alerts
Willing to participate in an on-call rotation
Strong written and verbal communication skills, especially during incidents
