IT Security & Identity Engineer

Neuralink's Information Technology team as an IT Security & Identity Engineer. In this hands-on role, you will be responsible for managing identity, access, and endpoint security for our corporate environment.

Responsibilities

• You will design and implement security controls, manage identity infrastructure, drive identity lifecycle automation, and oversee endpoint security posture.
• Additionally, you will build and maintain security logging and detection, run enterprise vulnerability management, and conduct regular access reviews and audits.
• Drive identity lifecycle automation from onboarding through offboarding, including role-based access control (RBAC), attribute-driven group membership, just-in-time access, and reduction of standing privilege.
• Build and maintain security logging and detection for corporate IT: centralize identity, endpoint, SaaS, and network logs (Grafana/Loki, Prometheus, or a SIEM), write detections for identity abuse and endpoint compromise, and tune alerting.

Requirements

• The ideal candidate has at least 5 years of experience in securing corporate IT environments and strong communication skills.
• 5+ years of hands-on experience securing corporate IT environments (identity/MFA, endpoint security, logging and detection, vulnerability management, email or file services)
• Experience administering or operating at least two of the following: enterprise EDR/AV, centralized logging or SIEM, enterprise vulnerability management platform, enterprise MDM
• Demonstrated experience administering an enterprise IdP (Google Workspace, Microsoft Entra, or Okta) including SSO federation, SCIM provisioning, MFA enforcement, conditional access, and full user lifecycle management
• Excellent communication skills with IT engineers and a diverse user base including non-technical scientists and clinicians; able to explain security tradeoffs and risk decisions clearly
• Hands-on experience managing infrastructure or identity configuration with Terraform and Git-based workflows
• Scripting proficiency in Python, Bash, or PowerShell for security automation and integrations
• Bachelor's degree in computer science, cybersecurity, or another STEM discipline, or 5+ years of professional experience in enterprise IT security engineering in lieu of a degree
• Detection engineering experience: writing and tuning detections in Grafana/Loki, a SIEM, or comparable tooling
• Privileged access management, just-in-time access, and privilege-escalation reduction
• SOC or blue-team incident response experience on enterprise IT estates
• Familiarity with NIST 800-53, CIS Controls, or ISO 27001 control families as implemented by IT security engineering
• USD 99,000 - 185,000

Preferred

• Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools.
• Strong working knowledge of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM
• Experience implementing phishing-resistant MFA at scale: FIDO2/WebAuthn, passkeys, hardware tokens, smart cards
• Certificate-based authentication and PKI operations: TLS, X.509, 802.1x, internal CA management
• Zero-trust architecture experience, including device trust, Tailscale or comparable mesh VPN, and identity-aware access
• Hardening Windows, macOS, and Linux endpoints and servers; securing file shares, email gateways, and internal applications
• Configuration management with Ansible or similar; GitLab CI/CD pipelines
• Experience in regulated environments (HIPAA, SOC 2, or similar)