Senior Corporate IT Security Engineer, Taxfix

• 5+ years of hands-on experience in IT security, specifically securing corporate IT environments (not product/application security)
• Deep expertise with endpoint security solutions: MDM platforms (SimpleMDM, Jamf, InTune, FleetDM), EDR tools, and device management for macOS and Windows
• Strong knowledge of identity and access management systems, particularly Okta, SSO implementations, and SAML/SCIM protocols
• Experience securing SaaS ecosystems at scale (Google Workspace, Slack, Notion, 1Password, etc.)
• Demonstrable experience securing public cloud environments (e.g., AWS, Azure, GCP)
• Solid understanding of office network security, including VPNs, zero-trust architectures, and modern networking tools
• Background in DevOps or System Administration
• Ability to respond to and manage security incidents affecting internal operations
• Excellent communication skills—you can explain technical security concepts to non-technical stakeholders
• Fluent in English
• Not sure if you meet all the requirements for this role? Please apply anyway. You might bring something special to the team that we hadn't considered previously

Desirable

• As our Senior IT Security Engineer, you won’t just secure systems—you’ll focus on protecting the services and tools our employees rely on internally every day—from endpoints and identity management to SaaS applications and office networks
• You'll report to our Director of IT and work alongside System Engineers, Software Engineers, and IT Support Administrators to implement pragmatic security controls across our entire corporate environment
• You’ll be the hands-on driver of our internal IT security landscape—ensuring that every SaaS, tool, and endpoint used by Taxfix teams is secure by design and resilient in the face of threats
• Whether you work remotely within Germany or from our modern Berlin office in our hybrid work model, you'll have the freedom to design and implement security solutions that scale with our growth
• This isn't about creating roadblocks—it's about building security that enables our teams to work confidently and efficiently
• Own and continuously improve security across our employee devices (macOS, Windows), MDM platforms, and endpoint tooling (SimpleMDM, FleetDM, Kolide, osquery, EDR)
• Define and implement identity and access management best practices across our SaaS ecosystem (Okta, SAML/SCIM, SSO)
• Secure core business platforms like Google Workspace, 1Password, Notion, Jira, Slack, and internal GCP-hosted systems
• Lead incident response and management efforts, ensuring swift, effective resolution of security events impacting corporate IT operations
• Continuously monitor, evaluate, and enhance security controls to adapt to evolving cyber threats and technological changes
• Implement and enforce IT security policies across the organisation, providing clear guidance to all departments
• Conduct focused penetration testing and threat analysis of internal systems to identify vulnerabilities before they become problems
• Provide expert security guidance to stakeholders across Taxfix, translating complex security concepts into actionable recommendations