Senior Corporate Security Consultant

The Role

You will be embedded across multiple client engagements as each client's IT and corporate security lead. Our clients are US SaaS, fintech, and healthtech companies without their own IT team, and we act as that team for them. You will own their endpoints, identity provider, and SaaS environment, and work directly with their employees and leadership.

This role is heavily client-facing. Expect daily client calls, shared Slack channels with every client, and requests from every level of the company, from a VP of Engineering planning an EDR rollout to HR needing a laptop provisioned for a new hire.

Most of the work is hands-on IT administration. The rest is running the corporate security program around it, including access reviews, awareness training, and incident response. Cloud and application security work sits with our Senior Security Consultant role.

What You Will Do

Endpoints

• Deploy and manage MDM (Jamf, Kandji, Intune) across Mac and Windows fleets
• Provision and image endpoints for new hires
• Build and enforce device compliance policies such as disk encryption, OS updates, and screen lock
• Roll out and maintain EDR on managed devices

Identity and access

• Administer identity providers: Okta, Entra ID (Azure AD), and Google Workspace
• Connect client SaaS apps to SSO and SCIM provisioning
• Enforce MFA and conditional access policies
• Run onboarding and offboarding workflows so access is granted and removed on time
• Run periodic access reviews

SaaS and workplace administration

• Administer SaaS applications across each client's stack and track down unmanaged ones
• Harden Google Workspace and Microsoft 365, including email authentication (SPF, DKIM, DMARC) and external sharing settings
• Manage user access to AWS, GCP, and Azure accounts
• Handle day-to-day IT support requests from client employees

Corporate security program

• Write and implement IT and security policies, including acceptable use, access control, and incident response
• Run security awareness training programs
• Lead incident response for lost devices, compromised accounts, and suspicious logins
• Implement the IT controls clients need for SOC 2 and ISO 27001, and produce the evidence auditors ask for

What We Require

• 5+ years of hands-on experience in IT and security delivery. Project management, sales engineering, and security-adjacent roles don't count toward this
• Prior consulting or MSP experience is mandatory. You must have supported multiple clients and environments and communicated directly with their stakeholders
• Deep MDM experience: Jamf, Kandji, or Intune, across both Mac and Windows
• Identity provider administration: Okta, Entra ID, or Google Workspace, including SSO, SCIM, and MFA policy
• SaaS administration across a range of client stacks
• Corporate security program experience: you have run policies, access reviews, awareness training, and incident response yourself
• Working knowledge of SOC 2 and/or ISO 27001: you understand what the frameworks require of IT well enough to implement the controls yourself
• Strong client-facing skills: you are comfortable on a call with a client's VP of Engineering and equally comfortable helping their newest hire who can't get into Okta
• Professional-level English: written and verbal. You will be on client calls with US-based teams daily

What Sets You Apart

• You've taken a company from unmanaged devices to a fully enrolled fleet
• You've automated onboarding and offboarding from an HR system through to the identity provider
• You've led the response to a compromised account or lost device from first report to close
• You've worked with US-based clients
• You have Jamf, Okta, or Microsoft certifications, or broader ones like CISSP (not required, but signals depth)