Enterprise Security Engineer at TRM Labs

<h2>Build a Safer World.</h2><p style="min-height:1.5em">TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure.</p><p style="min-height:1.5em"><strong>Job Summary:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">TRM's Enterprise Security Team secures the identities, endpoints, and core SaaS infrastructure used by every employee and contractor, so the company can move fast without taking unnecessary risk. We operate at the intersection of IT and Security: building secure-by-default systems, automating controls, and reducing operational toil through engineering. We use AI tooling heavily as part of how we work, and we expect the same of the engineers who join us.</p></li><li><p style="min-height:1.5em">We're looking for an Enterprise Security Engineer to help harden and scale our corporate environment. You'll design and ship identity, endpoint, and SaaS security improvements; codify controls using automation and infrastructure-as-code; and partner closely with Security, Compliance, and engineering teams to continuously raise the security baseline while preserving a great employee experience.</p></li></ul><p style="min-height:1.5em"><strong>The impact you will have here:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Engineer secure-by-default endpoint baselines for macOS and Windows, including encryption, firewall, application controls, device compliance, and configuration standards.</p></li><li><p style="min-height:1.5em">Automate and scale identity and access controls in Entra ID and Google Workspace (SSO, SCIM, conditional access, privileged access workflows, access reviews, joiner/mover/leaver).</p></li><li><p style="min-height:1.5em">Codify security controls as code (Terraform/configuration profiles/policy-as-code), with peer review, change history, testing/rollback, and measurable outcomes.</p></li><li><p style="min-height:1.5em">Build and maintain automations and integrations (e.g., n8n/SlackOps/APIs/scripts) that reduce manual access grants, speed up control changes, and eliminate repetitive workflows.</p></li><li><p style="min-height:1.5em">Apply AI tooling (Claude Code, agentic workflows, MCP integrations, LLM-backed automations) to accelerate your own engineering and triage work, and help secure how the rest of the company uses AI: sanctioned tooling, data handling guardrails, and visibility into shadow AI.</p></li><li><p style="min-height:1.5em">Harden SaaS and collaboration platforms by reducing unmanaged apps and enforcing strong authentication, least privilege, sharing controls, and data protection guardrails.</p></li><li><p style="min-height:1.5em">Improve visibility and detection by ensuri