Enterprise Security Engineer

Build a Safer World.

------------------------

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.

TRM's Enterprise Security team secures the identities, endpoints, and core SaaS infrastructure used by every employee and contractor, enabling the company to move quickly without taking unnecessary risk. We operate at the intersection of IT and Security, building secure-by-default systems, automating controls, and reducing operational toil through engineering.

We use AI tooling extensively as part of how we work, and we expect the same of the engineers who join us.

We're looking for an Enterprise Security Engineer to help harden and scale our corporate environment. You'll design and deliver identity, endpoint, and SaaS security improvements; codify controls using automation and infrastructure-as-code; and partner closely with Security, Compliance, and Engineering teams to continuously raise our security baseline while preserving an excellent employee experience.

The impact you will have here

---------------------------------

• Engineer secure-by-default endpoint baselines for macOS and Windows, including encryption, firewall, application controls, device compliance, and configuration standards.
• Automate and scale identity and access controls in Microsoft Entra ID and Google Workspace, including SSO, SCIM, Conditional Access, privileged access workflows, access reviews, and joiner/mover/leaver processes.
• Codify security controls as code using Terraform, configuration profiles, and policy-as-code, with peer review, testing, rollback capabilities, change history, and measurable outcomes.
• Build and maintain automations and integrations (