Security and Identity Infrastructure Lead

About the Role:

• You'll lead Sofar's corporate security and identity infrastructure, including Google Workspace, SSO/SCIM, MDM/EDR, and access reviews.
• You'll drive the security compliance program and be the internal point person for customer security reviews.
• You'll collaborate with the managed IT partner and external vendors to keep security operations running smoothly.

What You'll Do:

• Own identity and access: automate joiner/mover/leaver processes, run access reviews, and roll out SSO/SCIM across SaaS tools.
• Manage endpoints: device management, EDR, and compliance policies, plus tune and triage SIEM detections.
• Lead compliance: maintain policies, operate compliance platform, collect audit evidence, and support SOC 2 and ISO 27001 efforts.

What You Bring:

• 5+ years in IT systems, corporate security, or security engineering, ideally at a startup.
• Hands-on experience with Google Workspace, SSO/SCIM, MDM, EDR, AWS IAM, and scripting in Python.
• Clear perspective on security for a ~100-person startup and experience going through SOC 2 or ISO 27001 audits.

Benefits & Perks:

• Competitive base salary ($150k-$200k) plus equity.
• Medical, dental, and vision coverage, 401(k), and flexible PTO.
• Learning and development stipend and visa sponsorship support.