Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior IT Security Engineer role.

Rezi rewrites your resume against Alloy's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior IT Security Engineer posting at Alloy — free, in seconds.

About the Role

Alloy is the AI-powered identity and fraud prevention platform that accelerates onboarding, stops fraud, and scales compliance across the customer lifecycle. We are creating a workplace where you can grow, thrive, and belong, recognized as one of Inc. Magazine's Best Workplaces and Forbes America's Best Startup Employers.

Responsibilities

Own workforce identity at Alloy, from access granting and automation to review and removal.
Serve as the primary technical SME for workforce identity and access management, including Okta groups, policies, application assignments, admin roles, MFA, and authentication controls.
Manage SaaS access and application onboarding, implementing and maintaining SSO integrations using SAML/OIDC, SCIM provisioning/deprovisioning, and Google Workspace access.
Maintain and improve employee and contractor joiner/mover/leaver workflows from HRIS through IdP and downstream SaaS, using Okta Workflows and other automation to reduce manual access processes.
Troubleshoot authentication and provisioning issues, administer temporary access and exceptions, and enhance the reliability and efficiency of access requests.
Refine, manage, and evolve Alloy's approach to role and attribute-based access control (RBAC/ABAC).
Mature Privileged Access Management (PAM/TPAM) for administrator and production resource access, including just-in-time, temporary access, and break-glass procedures.
Improve ownership and lifecycle controls for service accounts, system users, API credentials and tokens, OAuth applications, bots, and integrations.
Shape identity and delegated-access controls for AI platforms, AI agents, and MCP integrations.
Strengthen least privilege and RBAC/ABAC, run access and privileged-access reviews, remediate stale or orphaned accounts, enforce contractor access expiration, and provide IAM evidence for ISO 27001 and SOC 2.
Undertake endpoint security, EDR, DLP, application control, email security, SaaS/security tools, and other IT/Security projects within a shared-SME and backup-coverage model.
Investigate incidents involving identity, users, endpoints, email, and SaaS, coordinating with teammates and business partners, and maintaining clear processes and documentation.
Join the IT and Security on-call rotation, responding to critical alerts and urgent after-hours support requests.

Requirements

Hands-on experience in IT or security engineering with significant responsibility for Okta or a comparable workforce identity provider.
Experience administering IdP groups, access and authentication policies, SaaS application assignments, MFA, and administrative roles.
Experience implementing and troubleshooting SAML/OIDC SSO, SCIM provisioning, and OAuth-based integrations.
Experience running employee and contractor identity lifecycles across HR systems, an IdP, Google Workspace, and downstream SaaS applications.
Ability to automate access workflows using Okta Workflows, APIs, scripts, or comparable tools.
Understanding of least privilege, RBAC/ABAC, access reviews, and account lifecycle controls.
Working familiarity with endpoint security, EDR, DLP, email security, and SaaS security tooling, with a willingness to work beyond IAM.
Strong troubleshooting, documentation, and communication skills in a shared-responsibility IT/Security team.
Experience with temporary privileged access management platforms.
Experience governing non-human identities, service accounts, API credentials, and OAuth applications.
Familiarity with identity and delegated access for AI tools, agents, and MCP integrations.
Experience with ISO 27001 or SOC 2 controls in a fintech, SaaS, or other regulated environment.

Skills

Okta
SAML/OIDC
SCIM
OAuth
Google Workspace
Okta Workflows
RBAC/ABAC
Endpoint Security
EDR
DLP
Email Security
SaaS Security Tooling
Privileged Access Management (PAM/TPAM)
Identity and Access Management (IAM)

Location

Union Square, Manhattan (NYC HQ)

Work Type

Hybrid

Experience Level

Not specified

Education Level

Not specified

Salary/Compensations

$162,000 – $190,000

Benefits

Unlimited PTO and flexible work policy
Employee stock options
Medical, dental, vision plans with HSA (monthly employer contribution) and FSA options
401k with 100% match up to 4% of annual employee compensation
16 weeks of paid parental leave for eligible new parents
Home office stipend for new employees
Annual learning & development stipend
Well-being benefits include access to ClassPass, OneMedical, UrbanSitter, and Spring Health
Catered lunches
Frequent employee-organized cultural events

About the Company

Alloy is the AI-powered identity and fraud prevention platform that accelerates onboarding, stops fraud, and scales compliance across the customer lifecycle so financial organizations can grow without limits.
More than 900 of the world's leading financial institutions and fintechs trust Alloy for smarter risk management that drives growth.
Our values: Be Bold, Go Fast, Collaborate, and Celebrate Our Differences.
Continuously recognized and named one of Inc. Magazine's Best Workplaces, Forbes America's Best Startup Employers, Best Fintech to Work for by American Banker, year after year.

Equal Opportunity

Alloy is committed to fair and equitable compensation practices.
Alloy is proud to be an equal-opportunity workplace and employer.
We're committed to equal opportunity regardless of race, color, ancestry, religion, gender, gender identity, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, disability, or veteran status.
We are committed to an inclusive interview experience and provide reasonable accommodations to applicants with visible and invisible disabilities.
We encourage applicants to share needed accommodations with their recruiter.
All Alloy jobs are listed on our careers page.
Any communication during the recruitment process, including interview requests or job offers, will come directly from a recruiting team member with an alloy.com email address.
We do not use outside applications or automated text messaging in our recruiting process.
We will not ask for any sensitive financial or identification information during the recruiting process.
If you're ever unsure, please contact us directly via our website before sharing personal information.