Senior Security Engineer

We’re hiring a Senior Security Engineer to take the lead on security at Maze. You’ll own two closely connected areas:

• Identity, devices, and access management for the corporate IT foundation every Maze employee relies on
• Security controls that keep our cloud, code, and SaaS environment secure and auditable

Identity, devices, and access sit right at the intersection of IT and security. This is an opportunity to own that space end-to-end. Your job is to automate the IT side so well that most of your time goes to corporate security engineering. You own the budget and tooling to automate the IT layer, and the helpdesk scope stays deliberately small, so the role stays an engineering role.

You’ll report to our Senior Manager, Platform Engineering and work closely with teams across Maze.

As a Senior Security Engineer at Maze, you will:

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies
• Run our macOS fleet through Iru, including enrolment, configuration, patching, and compliance
• Automate joiner, mover, and leaver flows from Rippling so new hires are fully provisioned on day one and leavers lose access within hours
• Own SaaS licensing and app provisioning, while keeping internal support lightweight through automation and self-service
• Own security controls across AWS, GitHub, Kubernetes, and our SaaS environment, including role-based access, IAM hygiene, cloud guardrails, network boundaries, and secrets management
• Run vulnerability management end-to-end, taking findings from Intruder, Socket, and pentests through remediation and verification with clear owners and SLAs
• Run regular access reviews and generate audit evidence through Vanta, making compliance thorough, timely, and low-effort
• Bring a security perspective to incidents and post-incident reviews, turning what we learn into stronger controls
• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster

What you won’t own:

Application code review and threat modeling, sales questionnaires, customer security calls, or other customer-facing security work. These sit with our Senior Manager, Platform Engineering today and will move into the Infosec function as business needs grow.

What we’re looking for:

• You have a strong software, infrastructure, or security engineering background and are comfortable using code and infrastructure as code to automate repetitive work
• You’ve owned identity, MDM, and joiner/leaver automation at a remote company and can speak to the impact your automation had
• You’ve secured a modern AWS or GCP environment and can explain the trade-offs behind your IAM decisions
• You’ve run vulnerability management or access reviews in an environment with external audits
• You have experience with SOC 2 or ISO 27001 controls and know how to turn a control into an automated check
• You care about the employee experience and are comfortable saying no when needed while providing context and a better path forward
• You’re excited about AI-assisted development and actively use modern AI tools in your work

Our stack:

• Identity and people systems: Google Workspace, Rippling
• Devices: Iru (formerly Kandji), macOS
• Cloud and infrastructure: AWS, GCP, Kubernetes, Terraform, Docker
• Security and compliance: Vanta, Intruder, Socket, Datadog Security, Riot
• Network: Cloudflare Zero Trust
• CI/CD: GitHub Actions, Depot CI, Argo CD
• Observability: Datadog
• Collaboration: Slack, Notion, Linear, GitHub, Zoom
• Application: TypeScript, Node.js, React

You don’t need experience with every technology in our stack. We care more about strong fundamentals, an engineering approach to both IT and security, and excitement about making Maze secure by default as we scale.