Corporate IT and Security Engineer

The role

You will own the systems and controls that keep Rowspace secure and productive. This includes managing employee devices, identity, SaaS applications, corporate networks, SOC 2 operations, and security incident response.

What you will do

• Own employee IT across laptops, mobile devices, identity, access, onboarding, and offboarding
• Configure and manage MDM, SSO, endpoint security, email security, and company-wide SaaS applications
• Own corporate network security, including office networks, Wi-Fi, firewalls, DNS, VPNs, segmentation, and zero-trust access
• Maintain an accurate inventory of devices, applications, accounts, licenses, and access
• Build reliable onboarding and offboarding workflows with appropriate access controls
• Run day-to-day security operations, including monitoring, vulnerability management, incident response, and remediation
• Manage vulnerability scanning and coordinate remediation across corporate systems, endpoints, networks, and applications
• Own continuous control monitoring, evidence collection, audit preparation, and coordination with external auditors
• Conduct regular access reviews and maintain clear security policies, procedures, and runbooks
• Lead vendor security reviews and help evaluate new software, integrations, and AI tools

Required qualifications

• 5+ years of experience across corporate IT, systems administration, information security, security operations, or related roles
• Hands-on experience managing identity providers, SSO, MFA, MDM, endpoints, and enterprise SaaS applications
• Experience operating in a primarily macOS environment
• Experience with employee provisioning, access reviews, asset management, and onboarding and offboarding
• Experience supporting a SOC 2 program, including control operation, evidence collection, and audit coordination
• Working knowledge of network security, including segmentation, firewalls, VPNs, DNS, and secure access
• Familiarity with application-security practices such as threat modeling, secure development, dependency scanning, vulnerability management, and penetration testing
• Ability to work with engineers on technical security risks without needing to own product development
• Working knowledge of endpoint security, incident response, vulnerability management, and vendor risk
• Ability to automate workflows with scripting, APIs, or modern automation tools
• Good judgment when balancing security, usability, and speed
• Clear written communication and reliable operational follow-through

Nice to have

• Experience as an early IT or security hire at a growing software company
• Experience supporting a fintech company or another regulated industry
• Experience with tools such as Okta, Google Workspace, Microsoft 365, Kandji, Rippling, CrowdStrike, Cloudflare, Drata, or similar platforms
• Experience responding to customer security questionnaires and enterprise diligence requests
• Familiarity with cloud identity and security in AWS, Azure, or GCP
• Experience using AI and automation to improve internal operations
• Experience working with managed IT, compliance, or security providers

Benefits

• Comprehensive medical, dental, and vision insurance
• 401(k) plan including employer match on contributions made while employed by Rowspace
• Monthly commuter stipend
• Free daily lunch
• Fully stocked snack bar in the office
• Regular team offsites

About the company

Rowspace is a company where you will build the foundation for how corporate IT and security operate as the company grows.