Forward Deployed Identity Security Engineer

Company Description EnscureX is a unified platform that helps organizations simplify identity governance and compliance by delivering full visibility into user access and enforcing robust access policies. The platform enables IT, security, and compliance teams to discover and audit user roles, automate recurring access reviews, and maintain alignment with frameworks such as ISO 27001, SOC 2, and NIST. EnscureX provides executive-ready reporting on risk posture and compliance status, as well as no-code workflows for onboarding, offboarding, and incident response. By monitoring access in real time and identifying unused licenses to reduce SaaS waste, EnscureX serves as a centralized command center for access, risk, and compliance control. Role Description This is a full-time remote role for someone who knows access management inside out and wants to shape the product, not just operate it. You’ll work directly with customers, embedded in their identity environments, to understand how access actually works in their organization: the messy role sprawl, the orphaned accounts, the access reviews nobody enjoys, the audit that’s due next month. You’ll turn what you see into working solutions, using EnscureX where it fits and pushing us to build what doesn’t exist yet. Think forward deployed engineer, but for identity security. Half your time is in the field with customers. The other half is back with our product and engineering team, turning field insight into features, detections, workflows, and new ideas. What you’ll do Lead technical discovery with customers to map their identity landscape, access models, risks, and compliance gapsDeploy and configure EnscureX in customer environments, owning the path from kickoff to measurable valueDesign access governance solutions: role models, least-privilege strategies, access review programs, JML (joiner, mover, leaver) automation, and privileged access controlsSpot recurring customer problems and turn them into product proposals, prototypes, and roadmap inputExplore new ideas across identity threat detection, non-human identities, AI agent access, and policy automationAct as the voice of the customer inside EnscureX and the voice of EnscureX inside the customerSupport security assessments, investigations, and remediation planning tied to identity riskHelp customers prepare for ISO 27001, SOC 2, and NIST audits using access evidence and controlsProduce clear documentation, playbooks, and reports that both engineers and executives can act on Qualifications Deep, hands-on expertise in identity and access management, ideally with Microsoft Entra ID (Conditional Access, PIM, entitlement management, app registrations, service principals)Strong understanding of RBAC, ABAC, least privilege, SoD (separation of duties), access certifications, and identity lifecycle managementWorking knowledge of SSO, SAML, OIDC, OAuth, SCIM, and MFA, plus where they commonly breakFamiliarity with IGA, PAM, and ITDR tools and how they fit together in a security stackComfort with scripting or APIs (PowerShell, Python, Microsoft Graph) to prototype, automate, and investigateExperience mapping access controls to ISO 27001, SOC 2, or NISTCustomer-facing experience: consulting, solutions engineering, implementation, or similarA builder’s mindset. You see a problem three times and start thinking about how to solve it for everyoneAbility to explain complex technical issues clearly to security teams, IT admins, and executivesBachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experienceRelevant certifications (e.g., SC-300, CISSP, CISM, Security+) are a plusComfortable working independently and remotely across distributed teams, and traveling to customer sites when needed Why this role You’ll sit at the point where customer reality meets product direction. What you learn in the field will directly shape what EnscureX builds next.