Security Engineer (Cloud & Endpoint) - Headquarter at Skelar

Skelar

Kyiv, Lviv, Warsaw·8h ago

Mid LevelFull-timePythonRustAPI

Salary Range

$102,000 - $138,000 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an active and responsible Security Engineer to join our team at SKELAR, a venture builder that builds international IT product companies. This role focuses on taking control of our cloud ecosystem and corporate device security. With over 2000 users and 1000+ devices, your work will involve building a systematic hardening process and automating security rather than manual configuration.

Key Responsibilities

→Conduct comprehensive security reviews of key services including GWS, Dropbox, Notion, and Slack
→Implement architectural changes to minimize data leakage risks
→Work deeply with Okta for identity and access management
→Manage the macOS fleet using Jamf Pro and Jamf Protect
→Develop and implement data leak prevention policies for cloud storage and messengers
→Process tickets and investigate incidents in the corporate environment (L2/L3 level)

Requirements

✓Deep knowledge of Okta (SSO, MFA, Lifecycle management, Workflows)
✓Understanding of authentication and authorization protocols (SAML 2.0, OIDC, OAuth 2.0, SCIM)
✓Practical experience with Jamf (Pro/Protect) for macOS management
✓Experience administering and hardening SaaS services according to CIS Benchmarks
✓Understanding of EDR and DLP solutions
✓Ability to automate tasks using Python or Bash
✓Understanding of Infrastructure as Code for security configuration management
✓Ability to communicate complex security solutions in a business-understandable language
✓Systemic approach to problem-solving
✓summaryBullets: [
✓"Conduct security reviews of key services including GWS, Dropbox, Notion, and Slack",
✓"Implement architectural changes to minimize data leakage risks",
✓"Work deeply with Okta for identity and access management",
✓"Manage the macOS fleet using Jamf Pro and Jamf Protect",
✓"Develop and implement data leak prevention policies",
✓"Process tickets and investigate incidents in the corporate environment",
✓"Automate security tasks using Python or Bash"
✓],
✓requirementBullets: [
✓"Deep knowledge of Okta (SSO, MFA, Lifecycle management, Workflows)",
✓"Understanding of authentication and authorization protocols",
✓"Practical experience with Jamf (Pro/Protect) for macOS management",
✓"Experience administering and hardening SaaS services",
✓"Understanding of EDR and DLP solutions",
✓"Ability to automate tasks using Python or Bash",
✓"Understanding of Infrastructure as Code for security configuration management"
✓]