Member of Technical Staff, Infrastructure Security

The role

You will build, secure, and operate systems protecting corporate infrastructure, employee devices, identities, and applications. You will own technical implementation of security controls across identity, endpoint security, SaaS applications, and corporate networks.

What you will do

• Design, implement, and maintain identity and access controls across Microsoft Entra ID and corporate applications.
• Configure and manage SSO/SAML, SCIM provisioning, MFA, Conditional Access, and role-based access controls (RBAC).
• Secure and automate employee joiner, mover, and leaver (JML) workflows.
• Implement least-privilege access and strengthen authentication and authorization practices.
• Own endpoint security controls across corporate devices, including Microsoft Intune/MDM, device compliance, and endpoint detection and response (EDR).
• Secure SaaS applications through access management, permissions, provisioning, and configuration reviews.
• Design and implement Zero Trust access controls.
• Build scripts, API integrations, and automated workflows to improve security operations.
• Develop and maintain security monitoring, alerting, and detection capabilities.
• Investigate compromised accounts, suspicious activity, and endpoint security incidents.

Required qualifications

• 5+ years of hands-on experience in corporate security engineering, IT security, or enterprise security infrastructure.
• Proven experience personally implementing, configuring, troubleshooting, and operating corporate security systems.
• Strong experience with Microsoft Entra ID, SSO/SAML, SCIM, MFA, Conditional Access, and identity lifecycle management.
• Hands-on experience with endpoint management and security tools, including Intune/MDM, device compliance, and EDR.
• Experience securing SaaS applications, managing permissions, and implementing Zero Trust access principles.
• Proficiency in scripting and automation using Python, JavaScript, PowerShell, or similar languages, including API integrations.
• Familiarity with security monitoring, incident investigation, and remediation of compromised accounts or devices.
• Strong security judgment and the ability to independently identify, prioritize, and resolve high-impact risks.
• Broad technical expertise across corporate security infrastructure.

Nice to have

• ideally in a high-growth technology environment

Benefits

• Base Salary: $200,000 - $300,000
• Stock option program
• Comprehensive benefits package

About the company

Higgsfield AI is a generative AI company building AI-powered video creation and next-generation creative tools. It has 30M+ users worldwide and powers 390 of Fortune 500 brands.