Enterprise Security Engineer

Opendoor • Miami, FL

137d • Onsite

About The Position

Opendoor’s Enterprise Security Engineer builds and operates internal identity, endpoint, and security systems that enable employees to work safely while maintaining engineering velocity. The role designs safeguards and runs the enterprise security program day to day, with identity as its core control plane. The work includes automating identity lifecycles and access governance, securing and managing endpoints, operating endpoint detection and protection, and using automation and AI agents to reduce manual security work. The engineer also partners with detection and response teams and establishes secure-by-default standards for SaaS and enterprise tools, including AI tools.

Requirements

• IT or security engineering experience with an enterprise focus in fast-paced technology companies.
• Deep hands-on Okta expertise, including lifecycle management, SAML/OIDC SSO, SCIM provisioning, and API-driven automation; console-only administration is not sufficient.
• Identity-first approach, applying phishing-resistant authentication, conditional access, and least privilege at scale.
• Experience managing endpoints at scale with Jamf, including macOS hardening and configuration-as-code.
• Working familiarity with Windows endpoint management.
• EDR operations experience with CrowdStrike Falcon or an equivalent platform.
• Strong scripting and automation skills in Python, Go, or TypeScript, and comfort writing infrastructure and configuration as code.
• High autonomy and comfort defining a path forward when no playbook exists.
• Humility and curiosity, with an approach that enables employees and partner teams while building guardrails.

Nice To Haves

• A proven track record building agentic systems and strong conviction that AI and automation should eliminate manual work.

Responsibilities

• Build and operate identity lifecycle automation for joiners, movers, and leavers; access governance and reviews; SSO and SCIM application onboarding; phishing-resistant MFA; and conditional access.
• Run the enterprise security program, owning system availability, operating metrics such as fleet coverage, MTTR on enterprise vulnerabilities, and access-review completion, and continuous improvement.
• Manage and harden the endpoint fleet through centralized device management, including baseline configuration, hardening, and patch and compliance enforcement as code.
• Operate endpoint detection and protection, tune security posture, and reduce enterprise vulnerability exposure while maintaining engineering speed.
• Build automation and AI agents to eliminate manual enterprise security work, including access reviews, onboarding and offboarding, drift detection, and audit evidence collection.
• Partner with the detection and response team to provide high-fidelity endpoint and identity telemetry to monitoring systems and support incident response.
• Establish secure-by-default standards for SaaS onboarding and enterprise tooling, including employee-adopted AI tools.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed