layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

IT Security & Identity Engineer at Neuralink | LAYIQ

Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools.
Manage identity infrastructure and access policy as code using Terraform and GitLab CI/CD; treat the IdP, group membership, application assignments, and conditional access as versioned, reviewable state.
Drive identity lifecycle automation from onboarding through offboarding, including role-based access control (RBAC), attribute-driven group membership, just-in-time access, and reduction of standing privilege.
Design and operate strong authentication: phishing-resistant MFA (FIDO2/WebAuthn, passkeys, hardware tokens), certificate-based authentication (X.509, 802.1x), and device-trust conditions tied to MDM compliance.
Own endpoint security posture across macOS, Windows, and Linux alongside the IT team: EDR policy and operations, disk encryption, secure baselines, and compliance enforcement through MDM (Intune, Jamf, or similar).
Build and maintain security logging and detection for corporate IT: centralize identity, endpoint, SaaS, and network logs (Grafana/Loki, Prometheus, or a SIEM), write detections for identity abuse and endpoint compromise, and tune alerting.
Run enterprise vulnerability management: scanning, prioritization, remediation workflows with system owners, and evidence of closure.
Harden traditional IT services used by engineering, science, and clinical staff (email, file shares, directory services, collaboration tools, internal applications); review and improve permissions, group membership, and access models.
Partner with systems, network, and application owners to securely design and operate services on the Tailscale and FortiGate-based network: authentication and authorization, logging, patching, and least privilege.
Lead or support detection, triage, and incident response for the corporate IT environment; participate in the IT on-call rotation.
Conduct regular access reviews and audits; produce evidence supporting HIPAA, PII handling, and SOC 2 or comparable frameworks in partnership with Compliance.
Drive scripting and automation (Python, Bash, PowerShell) for repeatable security tasks: baselines, evidence collection, health checks, and remediation.
Recommend, justify, and implement improvements through an accepted change control process; define, document, and follow standards for design, testing, and implementation.
Serve as the IAM and security subject matter expert for the IT team, providing technical guidance and mentoring teammates.
Required Qualifications: Bachelor's degree in computer science, cybersecurity, or another STEM discipline, or 5+ years of professional experience in enterprise IT security engineering in lieu of a degree.
5+ years of hands-on experience securing corporate IT environments (identity/MFA, endpoint security, logging and detection, vulnerability management, email or file services).
Demonstrated experience administering an enterprise IdP (Google Workspace, Microsoft Entra, or Okta) including SSO federation, SCIM provisioning, MFA enforcement, conditional access, and full user lifecycle management.
Strong working knowledge of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM.
Hands-on experience managing infrastructure or identity configuration with Terraform and Git-based workflows.
Experience administering or operating at least two of the following: enterprise EDR/AV, centralized logging or SIEM, enterprise vulnerability management platform, enterprise MDM.
Scripting proficiency in Python, Bash, or PowerShell for security automation and integrations.
Excellent communication skills with IT engineers and a diverse user base including non-technical scientists and clinicians; able to explain security tradeoffs and risk decisions clearly.

IT Security & Identity Engineer

Employer job description

About Neuralink:

Team Description:

Job Description and Responsibilities:

Preferred Qualifications:

What We Offer:

About this listing