← All roles

Enterprise IT Engineer

PhysicsX· IT & InfoSec
Apply on company site
Hybrid (New York, NY)Full-timePosted 1mo ago

About the role

Enterprise IT security and identity engineer role focused on designing, deploying, and operating modern zero-trust, identity, and device management for a AI-native engineering company.

Responsibilities

  • Own and evolve our Microsoft Entra ID environment: identity architecture, conditional access policies, MFA, PIM, SSO/SCIM integrations, and hybrid identity where relevant.
  • Manage enterprise infrastructure as code in Terraform (identity, networking, and security tooling), so that configuration is versioned, reviewable, and repeatable.
  • Design and implement zero trust network access, replacing legacy VPN patterns with modern SASE-based access control.
  • Own MDM strategy and operations across the device fleet (macOS/Windows/Linux/Mobile): enrolment, compliance baselines, patch management, and endpoint security posture.
  • Partner with the platform/DevOps team to keep enterprise IT and cloud (AWS, GCP, Azure) security postures aligned and consistent.
  • Lead access reviews, least-privilege enforcement, and identity governance work to support audits and compliance requirements (e.g., SOC 2, ISO 27001).

Qualifications

  • 5 - 10 years of experience in enterprise IT, security engineering, or identity/infrastructure roles, with deep, hands-on ownership of Microsoft Entra ID/Azure AD in production.
  • Deep Conditional Access policy design experience, including risk-based, device-aware access rules.
  • Experience with Entra ID Governance: Access Reviews, Identity Protection, Privileged Identity Management (PIM) at scale.
  • SSO/SAML/OIDC federation and SCIM provisioning across a meaningful number of enterprise apps.
  • Endpoint security tooling experience: EDR platforms (CrowdStrike, Defender for Endpoint, or similar).
  • Scripting and automation ability (PowerShell, Python, or Microsoft Graph API) to automate identity and device workflows.
  • Experience with hybrid identity (Entra Connect or on prem AD sync).
  • Familiarity with compliance frameworks such as SOC 2, ISO 27001, and FedRAMP, able to translate control requirements into technical implementation.

Skills

Required:Microsoft Entra ID / Azure ADConditional AccessEntra ID Governance (Access Reviews, Identity Protection, PIM)SSO/SAML/OIDC & SCIMEDR / Endpoint SecurityAutomation / ScriptingHybrid Identity

Benefits

  • Equity options
  • 5% contribution to 401(k)
  • Free team lunch 1x/week
  • Private health insurance
  • Enhanced parental leave (3 months paternity, 6 months maternity)
  • 20 days annual leave (+ public holidays)
  • Personal development support
  • Gympass / Wellhub (subsidized)
  • Flexible Spending Account (FSA)
Last updated Sep 23, 2026. Interested? Apply on the company site.

About PhysicsX

Accelerating Industrial Innovation with AI

PhysicsX is deploying AI to transform how physical systems are engineered, embedding intelligence across the entire product lifecycle, from concepting and design to manufacturing and operations.

AIIndustrial InnovationDesignManufacturingOperationsAI ToolsProduct Lifecycle
Company profileWebsite

More open roles at PhysicsX