Forward Deployed Identity Security Engineer

Company Description
EnscureX is a unified platform that helps organizations simplify identity governance and compliance by delivering full visibility into user access and enforcing robust access policies. The platform enables IT, security, and compliance teams to discover and audit user roles, automate recurring access reviews, and maintain alignment with frameworks such as ISO 27001, SOC 2, and NIST.
EnscureX provides executive-ready reporting on risk posture and compliance status, as well as no-code workflows for onboarding, offboarding, and incident response. By monitoring access in real time and identifying unused licenses to reduce SaaS waste, EnscureX serves as a centralized command center for access, risk, and compliance control.
Role Description
This is a full-time remote role for someone who knows access management inside out and wants to shape the product, not just operate it.
You’ll work directly with customers, embedded in their identity environments, to understand how access actually works in their organization: the messy role sprawl, the orphaned accounts, the access reviews nobody enjoys, the audit that’s due next month. You’ll turn what you see into working solutions, using EnscureX where it fits and pushing us to build what doesn’t exist yet.
Think forward deployed engineer, but for identity security. Half your time is in the field with customers. The other half is back with our product and engineering team, turning field insight into features, detections, workflows, and new ideas.
What you’ll do
Lead technical discovery with customers to map their identity landscape, access models, risks, and compliance gaps
Deploy and configure EnscureX in customer environments, owning the path from kickoff to measurable value
Design access governance solutions: role models, least-privilege strategies, access review programs, JML (joiner, mover, leaver) automation, and privileged access controls
Spot recurring customer problems and turn them into product proposals, prototypes, and roadmap input
Explore new ideas across identity threat detection, non-human identities, AI agent access, and policy automation
Act as the voice of the customer inside EnscureX and the voice of EnscureX inside the customer
Support security assessments, investigations, and remediation planning tied to identity risk
Help customers prepare for ISO 27001, SOC 2, and NIST audits using access evidence and controls
Produce clear documentation, playbooks, and reports that both engineers and executives can act on
Qualifications
Deep, hands-on expertise in identity and access management, ideally with Microsoft Entra ID (Conditional Access, PIM, entitlement management, app registrations, service principals)
Strong understanding of RBAC, ABAC, least privilege, SoD (separation of duties), access certifications, and identity lifecycle management
Working knowledge of SSO, SAML, OIDC, OAuth, SCIM, and MFA, plus where they commonly break
Familiarity with IGA, PAM, and ITDR tools and how they fit together in a security stack
Comfort with scripting or APIs (PowerShell, Python, Microsoft Graph) to prototype, automate, and investigate
Experience mapping access controls to ISO 27001, SOC 2, or NIST
Customer-facing experience: consulting, solutions engineering, implementation, or similar
A builder’s mindset. You see a problem three times and start thinking about how to solve it for everyone
Ability to explain complex technical issues clearly to security teams, IT admins, and executives
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
Relevant certifications (e.g., SC-300, CISSP, CISM, Security+) are a plus
Comfortable working independently and remotely across distributed teams, and traveling to customer sites when needed
Why this role
You’ll sit at the point where customer reality meets product direction. What you learn in the field will directly shape what EnscureX builds next.

Work arrangement
Yes