Security Engineer, Corporate Security

The Role

We are looking for a Security Engineer to join our Corporate Security team and help protect our people, systems, and data. This role focuses on securing corporate infrastructure and internal environments, ensuring employees can work safely and productively while minimizing organizational risk.

You’ll partner closely with IT, Engineering, People Ops, Legal, and leadership to design and implement scalable security controls across endpoints, identity systems, SaaS applications, and internal networks. A strong focus of this role will be building secure, automated identity and access management systems that reduce manual effort and enforce least privilege at scale.

This role is open remotely across the U.S. and Canada.

What You’ll Do

• Design, implement, and maintain security controls across corporate infrastructure (endpoints, identity, SaaS, internal networks)
• Own and evolve identity and access management (SSO, MFA, RBAC, lifecycle automation)
• Build automation to manage access controls using APIs, scripting, and infrastructure-as-code
• Implement and maintain conditional access policies and device trust controls
• Improve endpoint security posture (MDM, EDR, disk encryption, patch management, hardening standards)
• Conduct security reviews of new SaaS tools and ensure secure integration with identity systems
• Monitor identity-related logs and authentication signals; respond to suspicious activity
• Drive vulnerability management and remediation efforts across corporate systems
• Develop and maintain corporate security policies, standards, and technical controls
• Support audit readiness and compliance efforts (e.g., SOC 2, ISO 27001), including access reviews and automated evidence collection

What We’re Looking For

• 3–7+ years of experience in security engineering, IT security, or corporate security
• Strong experience with identity platforms (Okta, Azure AD, Google Workspace, etc.)
• Solid understanding of authentication and authorization protocols (SAML, OIDC, OAuth, SCIM)
• Experience implementing RBAC and enforcing least privilege across SaaS environments
• Experience building automation using scripting (Python, Bash, etc.) or infrastructure-as-code (e.g., Terraform)
• Familiarity with EDR, SIEM, and log analysis tools
• Knowledge of network security fundamentals (VPNs, firewalls, segmentation, zero trust)
• Experience responding to and investigating security incidents
• Ability to balance strong security controls with user experience
• Strong written and verbal communication skills

Nice to have

• Experience designing zero trust architectures
• Experience with privileged access management (PAM) tools
• Familiarity with SaaS Security Posture Management (SSPM)
• Experience in a high-growth or startup environment
• Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA, etc.)

Why this role matters & why join Doppel

Corporate security is foundational to protecting our people, intellectual property, and customer trust. Identity is increasingly the control plane for corporate security, and automation is key to scaling securely. In this role, you’ll directly shape how we secure internal systems, reduce risk through strong identity controls, and eliminate manual processes that slow the business down.

• $140,000 - $175,000 USD
• Meaningful equity so you share in Doppel’s success
• Remote first culture with flexibility built in
• Flexible PTO, comprehensive health benefits, parental leave, and more
• A high growth environment where your work has immediate impact and visibility