← All roles

IT Security & Identity Engineer

Neuralink· Software
Apply on company site
Austin, TX$99k - $185kFull-timePosted 3w ago

About the role

Hands-on IT Security & Identity Engineer responsible for identity, access, and endpoint security for Neuralink’s corporate environment. Owns IdP, SSO federation, lifecycle automation, and endpoint protection; builds and operates controls in Terraform/GitLab, including on-call production support and incident response.

Responsibilities

  • Design, deploy, and operate identity and access management across Google Workspace, Microsoft Entra, and integrated SaaS applications; own SSO federation (SAML, OIDC, OAuth 2.0) and SCIM provisioning for business-critical tools.
  • Manage identity infrastructure and access policy as code using Terraform and GitLab CI/CD; treat the IdP, group membership, application assignments, and conditional access as versioned, reviewable state.
  • Drive identity lifecycle automation from onboarding through offboarding, including RBAC, attribute-driven group membership, just-in-time access, and reduction of standing privilege.
  • Design and operate strong authentication: phishing-resistant MFA (FIDO2/WebAuthn, passkeys, hardware tokens), certificate-based authentication (X.509, 802.1x), and device-trust conditions tied to MDM compliance.
  • Own endpoint security posture across macOS, Windows, and Linux: EDR policy and operations, disk encryption, secure baselines, and MDM compliance (Intune, Jamf, etc).
  • Build and maintain security logging and detection for corporate IT: centralize logs, write detections for identity abuse and endpoint compromise, tune alerting.
  • Run enterprise vulnerability management: scanning, prioritization, remediation workflows with system owners, and evidence of closure.
  • Harden IT services used by engineering, science, and clinical staff; review permissions, group membership, and access models.
  • Collaborate with systems, network, and application owners to securely design and operate services on Tailscale and FortiGate-based network: authentication, authorization, logging, patching, least privilege.
  • Lead or support detection, triage, and incident response for the corporate IT environment; participate in IT on-call rotation.
  • Conduct regular access reviews and audits; produce evidence supporting HIPAA, PII handling, and SOC 2 or comparable frameworks in partnership with Compliance.
  • Drive scripting and automation (Python, Bash, PowerShell) for repeatable security tasks: baselines, evidence collection, health checks, remediation.
  • Recommend, justify, and implement improvements through change control; define, document, and follow standards for design, testing, and implementation.
  • Serve as IAM and security subject matter expert for the IT team, providing technical guidance and mentoring teammates.

Qualifications

  • Bachelor’s degree in computer science, cybersecurity, or another STEM field, or 5+ years of professional experience in enterprise IT security engineering in lieu of a degree.
  • 5+ years of hands-on experience securing corporate IT environments (identity/MFA, endpoint security, logging and detection, vulnerability management, email or file services).
  • Demonstrated experience administering an enterprise IdP (Google Workspace, Microsoft Entra, or Okta) including SSO federation, SCIM provisioning, MFA enforcement, conditional access, and full user lifecycle management.
  • Strong working knowledge of IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM.
  • Hands-on experience managing infrastructure or identity configuration with Terraform and Git-based workflows.
  • Experience administering or operating at least two of the following: enterprise EDR/AV, centralized logging or SIEM, enterprise vulnerability management platform, enterprise MDM.
  • Scripting proficiency in Python, Bash, or PowerShell for security automation and integrations.
  • Excellent communication skills with IT engineers and a diverse user base including non-technical scientists and clinicians; able to explain security tradeoffs and risk decisions clearly.

Skills

Required:Identity and access managementTerraformScripting for automation

Benefits

  • Growth potential; we rapidly advance team members who have an outsized impact
  • Excellent medical, dental, and vision insurance through a PPO plan
  • Paid holidays
  • Commuter benefits
  • Meals provided
  • Equity (RSUs) for all full-time employees
  • 401(k) plan
  • Parental leave
  • Flexible time off
Last updated Sep 30, 2026. Interested? Apply on the company site.

About Neuralink

Pioneering Brain Computer Interfaces

Creating a generalized brain interface to restore autonomy to those with unmet medical needs today and unlock human potential tomorrow.

alsbcibrain computer interfaceclinical trialhuman trialneuralinkparaplegiaprime study
Company profileWebsite

More open roles at Neuralink