Enterprise Security Engineer, TRM Labs

• Demonstrated experience engineering and scaling endpoint management (Jamf and/or Intune) and endpoint security controls for macOS and Windows
• Strong IAM foundation: hands-on experience with Entra ID (conditional access, SSO, access governance) and Google Workspace and/or Microsoft 365 administration
• Proven ability to automate real operational workflows using scripting and APIs (Bash, PowerShell, Python, etc.)
• Strong troubleshooting and systems thinking: able to diagnose issues across identity, endpoint, network controls, and SaaS integrations
• Comfort balancing security and usability using a risk-based approach, communicating tradeoffs clearly to technical and non-technical stakeholders

Desirable

• The Security team is responsible for and committed to securing all things at TRM
• From our customers to our code, and everything in between, the security team is involved in all aspects of the business
• We are looking for an Enterprise Security Engineer to join our growing team, laying the foundation for all things enterprise security
• You’ll work on securing our corporate software, services, tooling, and infrastructure, having a critical part in our security posture at TRM
• TRM’s Enterprise Security Team secures the identities, endpoints, and core SaaS infrastructure used by every employee and contractor, so the company can move fast without taking unnecessary risk
• We operate at the intersection of IT and Security: building secure-by-default systems, automating controls, and reducing operational toil through engineering
• We’re looking for an Enterprise IT & Security Engineer to help harden and scale our corporate environment
• You’ll design and ship identity, endpoint, and SaaS security improvements; codify controls using automation and infrastructure-as-code; and partner closely with Security, Compliance, and engineering teams to continuously raise the security baseline while preserving a great employee experience
• Engineer secure-by-default endpoint baselines for macOS and Windows Endpoints, including encryption, firewall, application controls, device compliance, and configuration standards
• Automate and scale identity and access controls in Entra ID and Google Workspace (SSO, SCIM, conditional access, privileged access workflows, access reviews, joiner/mover/leaver)
• Codify security controls as code (Terraform/configuration profiles/policy-as-code), with peer review, change history, testing/rollback, and measurable outcomes
• Build and maintain automations and integrations (e.g., n8n/SlackOps/APIs/scripts) that reduce manual access grants, speed up control changes, and eliminate repetitive workflows
• Harden SaaS and collaboration platforms by reducing unmanaged apps and enforcing strong authentication, least privilege, sharing controls, and data protection guardrails
• Improve visibility and detection by ensuring logging coverage and telemetry for endpoint, identity, and key SaaS applications (e.g., Defender/Sentinel and vendor logs where relevant)
• Drive vulnerability and configuration drift reduction through patch compliance targets, remediation pipelines, and reporting that leadership can act on
• Partner with compliance and risk stakeholders to produce evidence, document controls, and operationalize requirements without creating brittle, manual processes
• Participate in an on-call rotation (every ~3 weeks) for escalations related to identity, endpoint security, and critical enterprise systems
• Driving critical investigations that can’t wait for typical business hours
• Shipping products in days when others would schedule quarters
• Partnering with teams across time zones to deliver insights while the story is still unfolding
• Building new solutions from first principles when the playbook doesn’t yet exist
• Protecting victims and customers by tracing illicit activity and disrupting criminal networks