Security Engineer, CorpSec

We’re looking for a Corporate Security Engineer to own our corporate security program. You’ll own strategy, execution, and day-to-day operation of workforce identity (Okta), endpoints (a Jamf-managed fleet plus BYOD through Island Browser), SaaS security, and the automation layer that turns "can I get access to X" from a Slack message into a policy-driven, time-bound, audited grant. Today this work is spread part-time across our Security Engineering team and People Ops; you'll consolidate it into a single program that you own.

You'll be the technical owner of IT within Security Engineering, partnering with People Operations (who own device logistics, policy, and first-line employee support), Platform Engineering, Legal, and Compliance. This role requires hands-on identity and access management expertise, endpoint management experience, comfort managing SaaS platforms with IaC, and comfort building automation, including with LLM-based agents. You'll have Claude, Devin, and an alert-triage agent already in production, and we expect you to use them, including to build the AI-native help desk that replaces our manual access-request process.

About Clipboard

About Clipboard

Our mission is to uplift as many communities as possible. We do this through our app-based marketplace that connects healthcare professionals with the workplaces that need amazing workers. This enables hundreds of thousands of people to achieve financial stability for themselves and their families while providing essential care to millions of people across the U.S.

Founded in 2016, we are a remote-first team of over 1,000 people building a top Y-Combinator company and have been profitable since 2022. We’re the leader in Long-Term Care staffing and are rapidly expanding into Home Health, Hospitals, and more, meaning we have more work to do than people to do it, and are growing our team to support millions more people and their communities.

Responsibilities

• You’ll need to prioritize well and write clearly for a global, async team.
• Own workforce identity: Okta as our IdP (SSO, MFA, device trust, SCIM), managed as code; the joiner/mover/leaver lifecycle from Rippling (our HRIS) into Okta and every downstream application; and time-bound, audited privileged access to high-blast-radius systems (AWS, GitHub, Snowflake, our internal admin app)
• Build and own IT and access automation: an AI-native help desk with just-in-time access requests, eligibility rules, approvals, automatic expiry, and reclamation of unused seats; onboarding and offboarding journeys driven from Okta; and bring our internal admin-app roles (impersonation, PHI/PII visibility, privileged operations) under the same model
• Own endpoint security for a hybrid fleet: Jamf for company-managed devices, Island Browser and Okta device trust for BYOD, with device posture as an input to access decisions
• Drive SaaS and third-party security: OAuth scope and MCP-connector governance, shadow IT visibility, SaaS security posture management, and vendor security reviews
• Architect and maintain zero trust / ZTNA access controls, DNS filtering, and remote access policies
• Own corporate detection and response in Datadog, our SIEM: extend our LLM-based alert-triage agent (the Engineering Ops Agent), wire in identity-threat signals, tune detections for identity and endpoint events, and evaluate future investments in the detection stack
• Own vulnerability management for the corporate environment: asset inventory (sourced from MDM and the IdP), patching cadence, and remediation tracking
• Lead corporate-side incident response: phishing, account compromise, insider threat
• Own the identity, device, and access controls our HIPAA program depends on, and keep the evidence current in Vanta; partner with Legal and Compliance on risk assessments and audits

Requirements

• 5+ years in corporate security, IT security, or a security engineering role
• Hands-on Okta experience: SSO, MFA, device trust, SCIM, lifecycle policies, and managing Okta as code (Terraform)
• Experience designing and operating Zero Trust architectures in modern enterprise environments
• Working knowledge of AWS IAM and Identity Center; Platform Engineering owns the landing zone, and you'll partner with them on privileged access
• Experience running a hybrid managed/BYOD fleet: Jamf (or equivalent MDM) required, plus browser-based isolation or device-trust controls for unmanaged devices
• Fluent in scripting and automation (Python, TypeScript, or similar) and infrastructure-as-code (Terraform); you've built and operated automation others depend on
• Experience building with LLM agents or AI-native automation platforms, or the demonstrated ability to pick this up quickly; you'll be expected to use AI to remove manual work
• Strong communicator who can prioritize clearly, push back when needed, and keep stakeholders aligned, in writing and across time zones
• Independent and resourceful worker who can keep themselves on track to meet critical deadlines, and proactively communicates if additional support is needed
• Stays current on emerging threats and knows how to translate intelligence into action

Preferred

• Datadog experience is a plus, especially querying and building on the platform
• HIPAA experience preferred; comfort working with a compliance automation platform (Vanta or similar)
• Bonus: prior experience at a high-growth startup

Quick Note on Scammers

Clipboard would never ask you for money or your bank details to participate in our hiring process. Report any scammers impersonating the Clipboard hiring team members here