IT and Security Engineer

We're building reliable and scalable systems that move money for thousands of businesses. As a regulated payment entity, we take security and compliance as seriously as we take speed — this role owns the controls that keep our endpoints, network, and data safe, and that hold up when auditors come knocking. What you will do Secure & Configure Own EDR rollout — deployment, policy tuning, alert triage, response. Configure MDM across macOS, Windows, and mobile devices. Roll out DLP across email, SaaS, and endpoints. Run patch management and harden endpoints fleet-wide. Maintain firewall rules, VPN, and network segmentation. Execute & Lead Own ISO 27001:2022 compliance — map controls, keep evidence audit-ready. Drive vulnerability remediation and access reviews. Manage IAM: SSO, MFA, provisioning and deprovisioning. Partner with Engineering, Legal, and Compliance on security requirements. Handle security incidents — contain, investigate, document, follow up. You’re a good fit if you have: 5+ years in System Administration (Mac/Windows) or IT security Hands-on EDR experience (CrowdStrike, SentinelOne, Defender for Endpoint) Hands-on MDM experience (Intune, Jamf, Kandji, Hexnode) Direct experience rolling out DLP, not just administering it Scripting for automation (Python, Bash, or PowerShell) Working knowledge of ISO 27001:2022 and Annex A controls The mindset we’re seeking: You own problems end to end, not just on paper. You move fast without cutting corners on security. You're as comfortable configuring systems as coordinating people. You collaborate well across engineering, legal, and compliance.