IT Security Engineer (Almaty)

The role

This person will own and strengthen the security of the corporate technology environment. They will work on identity and access management, endpoint security, SaaS security, Zero Trust, security automation, and incident response.

What you will do

• Own and strengthen identity and access controls with a focus on Microsoft Entra ID
• Implement and maintain SSO/SAML, SCIM provisioning, MFA, Conditional Access, and RBAC
• Build and improve automated joiner, mover, and leaver workflows
• Review permissions, privileged access, and authentication policies
• Manage and improve endpoint security through Microsoft Intune/MDM and endpoint protection tooling
• Deploy and maintain EDR capabilities across the corporate fleet
• Investigate endpoint security events and remediate compromised or non-compliant devices
• Assess and improve the security posture of corporate SaaS applications
• Design and implement Zero Trust principles across identity, endpoints, applications, and corporate access
• Automate repetitive security and IT workflows using scripts, APIs, and integrations

Required qualifications

• Strong hands-on experience with identity and access management, ideally within Microsoft Entra ID
• Experience implementing or managing SSO/SAML, SCIM, MFA, Conditional Access, RBAC, and JML workflows
• Experience with MDM and endpoint security, ideally Microsoft Intune and modern EDR tooling
• Understanding of SaaS and corporate application security
• Experience implementing or operating within a Zero Trust security model
• Ability to automate workflows using scripts and APIs, with experience in a language such as Python or JavaScript
• Working knowledge of security detection, investigation, and incident response
• Strong security judgment
• Comfortable operating independently in a fast-moving startup environment
• Builder mindset

Nice to have

• Experience with reverse engineering, CTFs, security competitions, or similar hands-on security challenges
• Strong understanding of networking fundamentals, including VPNs, network segmentation, authentication protocols, and common lateral-movement techniques
• Experience securing rapidly scaling or highly technical organizations
• Experience working closely with engineering or product security teams
• Familiarity with cloud security concepts and modern security monitoring tools

Benefits

• Competitive base salary in USD
• Equity: participation in the company's stock option program
• Relocation from anywhere to Almaty

About the company

Higgsfield AI is a generative AI company building at the frontier of AI-powered video creation and next-generation creative tools.