Enterprise Engineer

PhysicsX • New York, NY

2d • Hybrid

About The Position

PhysicsX is a deep-tech company with roots in numerical physics and Formula One, dedicated to accelerating hardware innovation at the speed of software. We are building an AI-driven simulation software stack for engineering and manufacturing across advanced industries. By enabling high-fidelity, multi-physics simulation through AI inference across the entire engineering lifecycle, PhysicsX unlocks new levels of optimization and automation in design, manufacturing, and operations — empowering engineers to push the boundaries of possibility. Our customers include leading innovators in Aerospace & Defense, Materials, Energy, Semiconductors, and Automotive.

Requirements

• 5 - 10 years of experience in enterprise IT, security engineering, or identity/infrastructure roles, with deep, hands-on ownership of Microsoft Entra ID/Azure AD in production.
• Deep Conditional Access policy design experience, not just enabling MFA, but building risk based, device aware access rules.
• Experience with Entra ID Governance: Access Reviews, Identity Protection, Privileged Identity Management (PIM) at scale.
• SSO/SAML/OIDC federation and SCIM provisioning across a meaningful number of enterprise apps.
• Endpoint security tooling experience: EDR platforms (CrowdStrike, Defender for Endpoint, or similar)
• Scripting and automation ability (PowerShell, Python, or Microsoft Graph API) to automate identity and device workflows.
• Experience with hybrid identity (Entra Connect or on prem AD sync).
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and FedRAMP, able to translate control requirements into actual technical implementation (access reviews, logging, encryption, change management), not just pass an audit checklist.

Nice To Haves

• Experience with Cloud IAM and security architecture, AWS IAM Security Center, Google Workforce Identity Federation, and how it interacts with enterprise identity (Entra) via federation.
• Compliance automation experience (Vanta, Drata)
• Experience with Cloudflare Zero Trust.
• Exposure to SIEM/EDR/XDR tooling and correlating identity signals with broader security monitoring.
• Background at an AI or high-growth SaaS company.
• Experience supporting UK/EU data protection requirements (e.g., GDPR) from an identity and access standpoint.
• Microsoft Certified: SC-300
• Microsoft Certified: SC-100
• Microsoft Certified: MD-102
• CompTIA Security+
• Certifications from your SASE vendor of choice (e.g., Cloudflare Certified, Zscaler Certified)
• CCNA

Responsibilities

• Own and evolve our Microsoft Entra ID environment: identity architecture, conditional access policies, MFA, PIM, SSO/SCIM integrations, and hybrid identity where relevant.
• Manage enterprise infrastructure as code in Terraform (identity, networking, and security tooling), so that configuration is versioned, reviewable, and repeatable.
• Design and implement zero trust network access, replacing legacy VPN patterns with modern SASE-based access control.
• Own MDM strategy and operations across the device fleet (macOS/Windows/Linux/Mobile): enrolment, compliance baselines, patch management, and endpoint security posture.
• Partner with the platform/DevOps team to keep enterprise IT and cloud (AWS, GCP, Azure) security postures are aligned and consistent.
• Lead access reviews, least-privilege enforcement, and identity governance work to support audits and compliance requirements (e.g., SOC 2, ISO 27001).

Benefits

• Equity options - share meaningfully in the company you’re helping to build.
• 5% contribution to 401(k) - build long-term security with a strong retirement plan.
• Free team lunch 1x/week - good food, great company, and space to connect.
• Private health insurance – comprehensive cover for you, offering total peace of mind.
• Enhanced parental leave – 3 months full pay paternity and 6 months full pay maternity leave, to provide extra flexibility during the moments that matter most.
• 20 days of Annual Leave (+ Public Holidays) - because taking time to rest matters.
• Personal development – dedicated support for learning, development, and leveling up over time.
• Gympass / Wellhub (subsidized) – for you and up to 3 family members, supporting both physical and mental wellbeing.
• Flexible Spending Account (FSA) – set aside pre-tax dollars for eligible healthcare expenses.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed