Senior Business Applications Security Engineer

About the Role:

We are seeking an experienced Senior Business Applications Security Engineer to join our growing Corporate Technology team. This is not a maintenance role-this is an opportunity to build something from the ground up. You will take ownership of the security posture for our entire business application ecosystem, from Salesforce and Workday to niche departmental tools, transforming a fragmented, reactive approach into a centralized, proactive, and hardened security program. Your focus will be on bridging business needs with cloud-based software solutions through implementation, optimization, and vendor management.

Transform business application security from an afterthought to a core competency. You will:

• Build from scratch: Design and implement a comprehensive business application security program where none exists
• Own the ecosystem: Take full ownership of security posture across 200+ business applications (SaaS, cloud, and on-premise)
• Establish the standard: Define what "secure" means for business applications and ensure every tool meets that bar
• Shift left: Embed security into procurement, integration, and lifecycle management processes
• Drive change: Partner with stakeholders across IT, Engineering, Finance, HR, Sales, and Marketing to fundamentally change how the organization thinks about application security

Responsibilities

• System Administration: Design and scale user access with role-based access controls (RBAC), where possible
• Technical Support & Troubleshooting: Provide escalation support in debugging app access/role issues
• Application Onboarding: Conduct requirements discovery and analysis with key stakeholders for new applications, particularly pertaining to login and role access protocols
• Identity Lifecycle Management: Designing and implementing automations ensuring automatically granted or revoked access
• Integration Management: Manage API connections and integrations between business applications in our tech stack
• Process Improvements: Identify and implement automation opportunities to streamline workflows
• Data & Compliance: Ensure data accuracy, integrity and compliance with security standards
• Mentorship to guide junior teammates on best practices within the role

Qualifications

• 8+ years of experience in Application Security or related role
• Professional Certifications: CISSP are a plus
• Expertise in Okta, Google Workspace, Microsoft 365
• Experience with SAML and OAuth protocols, as well as SCIM
• Proficiency with Okta Workflow or similar automation platforms
• Excellent ability to bridge conversations between technical teams and non-technical business stakeholders
• Soft skills: Change management, process improvement, stakeholder management, collaborative mindset with excellent written and verbal communication.

What We Offer:

• Competitive compensation package
• Equity opportunities
• Comprehensive health, dental, and vision coverage
• Flexible PTO and remote work options
• Learning & development resources
• A high-impact role in a fast-growing, mission-driven company.