IT Security & Identity Engineer

Join Neuralink's Information Technology team as an IT Security & Identity Engineer. In this hands-on role, you will be responsible for managing identity, access, and endpoint security for our corporate environment. You will design and implement security controls, manage identity infrastructure, drive identity lifecycle automation, and oversee endpoint security posture. Additionally, you will build and maintain security logging and detection, run enterprise vulnerability management, and conduct regular access reviews and audits. The ideal candidate has at least 5 years of experience in securing corporate IT environments and strong communication skills.

• Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools.
• Drive identity lifecycle automation from onboarding through offboarding, including role-based access control (RBAC), attribute-driven group membership, just-in-time access, and reduction of standing privilege.
• Build and maintain security logging and detection for corporate IT: centralize identity, endpoint, SaaS, and network logs (Grafana/Loki, Prometheus, or a SIEM), write detections for identity abuse and endpoint compromise, and tune alerting.

• 5+ years of hands-on experience securing corporate IT environments (identity/MFA, endpoint security, logging and detection, vulnerability management, email or file services)
• Experience administering or operating at least two of the following: enterprise EDR/AV, centralized logging or SIEM, enterprise vulnerability management platform, enterprise MDM
• Demonstrated experience administering an enterprise IdP (Google Workspace, Microsoft Entra, or Okta) including SSO federation, SCIM provisioning, MFA enforcement, conditional access, and full user lifecycle management
• Strong working knowledge of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM
• Excellent communication skills with IT engineers and a diverse user base including non-technical scientists and clinicians; able to explain security tradeoffs and risk decisions clearly
• Hands-on experience managing infrastructure or identity configuration with Terraform and Git-based workflows
• Scripting proficiency in Python, Bash, or PowerShell for security automation and integrations
• Bachelor's degree in computer science, cybersecurity, or another STEM discipline, or 5+ years of professional experience in enterprise IT security engineering in lieu of a degree
• Experience implementing phishing-resistant MFA at scale: FIDO2/WebAuthn, passkeys, hardware tokens, smart cards
• Certificate-based authentication and PKI operations: TLS, X.509, 802.1x, internal CA management
• Zero-trust architecture experience, including device trust, Tailscale or comparable mesh VPN, and identity-aware access
• Detection engineering experience: writing and tuning detections in Grafana/Loki, a SIEM, or comparable tooling
• Hardening Windows, macOS, and Linux endpoints and servers; securing file shares, email gateways, and internal applications
• Privileged access management, just-in-time access, and privilege-escalation reduction
• SOC or blue-team incident response experience on enterprise IT estates
• Familiarity with NIST 800-53, CIS Controls, or ISO 27001 control families as implemented by IT security engineering
• Configuration management with Ansible or similar; GitLab CI/CD pipelines
• Experience in regulated environments (HIPAA, SOC 2, or similar)