# Systems Engineer, Corporate Security

**Company:** [Ramp](https://hotfix.jobs/companies/ramp)
**Location:** New York, NY
**Role:** Security Engineering
**Salary:** $144k – $199k/yr
**Experience:** 3+ years
**Skills:** macOS, MDM, Jamf, Fleet, Kandji, Okta, SSO, MFA, SCIM, Python, Go, Bash, Crowdstrike, Cloudflare Zero Trust, Terraform
**Posted:** 2026-09-11

> Build and operate automated corporate security controls across endpoint devices, identity, network access, and enterprise AI tooling. The role requires 3–5 years of endpoint, identity, or corporate security experience, strong macOS and Okta expertise, and scripting skills.

## Job Description

## Responsibilities
- Maintain OS and software update policies and monitor the device fleet to bring newly introduced applications into the patching cadence.
- Automate endpoint security agent remediation across EDR, DLP, VPN, and related tooling by detecting missing, stale, or unhealthy agents and restoring device compliance.
- Maintain device configuration baselines as code, including drift detection and hardening standards.
- Configure Okta authentication and authenticator policies, including SSO, MFA, authenticator enrollment, device trust, and conditional access.
- Remediate identity posture gaps such as stale accounts, orphaned service principals, over-scoped OAuth grants, MFA gaps, and excess privileges.
- Implement and operate enterprise AI usage controls, including identity-aware access, logging and retention, DLP, and enforcement.
- Automate across platforms using APIs, build control-coverage reporting, and document operating procedures.

## Requirements
- 3–5 years of experience in client platform/endpoint engineering, identity and access management, or corporate security.
- Hands-on macOS management at scale using MDM such as Jamf, Fleet, Kandji, or equivalent, including macOS update mechanisms.
- Working knowledge of an identity provider such as Okta, including SSO, authentication and authenticator policies, SCIM provisioning, and conditional access.
- Scripting ability in Python, Go, or Bash, with experience automating against platform APIs.
- Experience with EDR and endpoint vulnerability management, such as CrowdStrike.
- Ability to evaluate tradeoffs among technical enforcement, policy, and user friction and explain them clearly.

## Nice to have
- osquery, Fleet, or other query-based fleet visibility tooling.
- Identity security posture management or access review and governance platforms.
- Cloudflare Zero Trust or other proxy, DNS, or network-layer enforcement, including TLS inspection.
- Exposure to AI and LLM security concerns, including agent authorization, tool calls, model gateways, and data leakage through AI tooling.
- Infrastructure as code and CI/CD experience with Terraform and GitHub Actions.
- Windows fleet management alongside macOS.
- Experience applying SOC 2 or PCI compliance frameworks to endpoints and access.

## Benefits
- Flexible PTO, home-office equipment, health and wellness stipend, intra-office travel budget, and weekly coffee stipend.
- United States employees receive medical, dental, and vision coverage, One Medical membership, 401(k) with employer match, fertility HRA, paid parental leave, pet insurance, in-office perks, and possible relocation coverage to New York City or San Francisco.

## Similar jobs

- [Security and Threat Operations Engineer](https://hotfix.jobs/jobs/46f0222c-d121-4ecc-90c4-448c120484e0) - OnePay - Remote - $140k – $190k/yr
- [Security Engineer 2 - Cyber Threat Intelligence](https://hotfix.jobs/jobs/dace61ec-d55c-4705-a07d-4371901a3ef0) - Datadog - New York, NY - $140k – $195k/yr
- [Security Scientist](https://hotfix.jobs/jobs/36a4a0c9-f833-41fb-bd29-ad40c4d5050f) - Figma - Remote - $140k – $348k/yr
- [Detection And Response Engineer](https://hotfix.jobs/jobs/e26f2974-0cc0-41bb-8685-35c14b076d36) - Modal - New York, NY - $150k – $270k/yr
- [Analyst, Privacy](https://hotfix.jobs/jobs/a897f8bc-44ea-42dd-bee6-ca5768c8084e) - Coinbase - Remote - $135k – $159k/yr

**Apply:** https://hotfix.jobs/jobs/60e4bbe5-986f-4cbb-a73c-f9ff000445bf
**Canonical:** https://hotfix.jobs/jobs/60e4bbe5-986f-4cbb-a73c-f9ff000445bf