Security Engineer

Responsibilities:

- Administer Google Workspace and Slack: users, groups, security settings, onboarding and offboarding

- Build and tune data-protection rules and alerts; triage the alerts - Enrol, secure and retire laptops and phones under our BYOD policy; report on device compliance - Deploy Nightfall DLP in audit mode, then enforce; tune detectors and reduce false positives

- Export, retain and review audit logs; prepare evidence for HIPAA risk assessments and audits

- Provide first-line and escalation IT support, and keep a knowledge base - Automate repetitive tasks with scripts kept in version control

Must-have

- 2 to 4 years in IT systems administration or corporate IT

- At least 2 years as a Google Workspace Super Admin (users, groups, OUs, Gmail routing, Drive sharing, Vault, audit logs)

- Slack administration (workspace settings, app approvals, retention)

- MDM / endpoint management for Mac, Windows and mobile devices, including BYOD (Google endpoint management, Jamf, Intune or similar) - SSO, MFA and least-privilege access

- Scripting in Python, JavaScript or Google Apps Script; comfortable with Git and APIs

- Strong troubleshooting and clear written documentation

- Working hours: [shift / overlap with US Central time]

Good to have

- Healthcare, telehealth or other regulated-industry experience; HIPAA Security Rule knowledge

- DLP tools (Nightfall, Netskope, Purview or similar); SIEM or log management - SOC 2 or HITRUST evidence collection

- Google Workspace Administrator or Security+ certification

Security conditions

- Background check, confidentiality agreement and HIPAA training before access is granted

- Admin access is least-privilege and reviewed regularly

Reports to: CTO / Security & Privacy Officer