Your Alloy resume, matched to the job ad
Drop in your resume and it opens next to this job, ready to tailor in one click.
4.8 from 167 in-app reviews
Senior IT Security Engineer
Alloy · New York City
Tailor your resume to this job
No account needed to start.
What Alloy asks for
From Alloy's Senior IT Security Engineer ad, checked 4 Nov 2026.
Okta and IAM administration
Hands-on experience as a technical expert for workforce identity and access management, specifically managing Okta groups, authentication policies, application assignments, and multi-factor authentication.
Identity lifecycle automation
Building and improving automated workflows for employee and contractor joiner, mover, and leaver processes using tools like Okta Workflows, APIs, or scripts to integrate HR systems and SaaS apps.
SSO and SCIM integrations
Implementing and troubleshooting single sign-on integrations using SAML or OIDC, along with automated provisioning and deprovisioning using SCIM.
Shared security engineering
Working beyond identity management to handle endpoint security, email security, and data loss prevention within a team that shares responsibility for critical alerts and on-call rotations.
Privileged access and governance
Maturing privileged access management using just-in-time access, and providing audit evidence for compliance standards like ISO 27001 or SOC 2.
Alloy operates in a hybrid-work environment. The ad requires in-person office attendance in New York City four days per week, specifically Tuesday through Thursday with a choice of Monday or Friday.
How the example answers the ad
Three of the five requirements above, each matched to a line in the example.
Identity lifecycle automation
“Automated joiner and leaver workflows using Okta Workflows and Python, resulting in a 75% reduction in manual provisioning tasks.”
Using Okta Workflows and Python to automate joiner and leaver processes shows experience with identity lifecycle automation. Reducing manual provisioning tasks by 75% highlights the scale of this automation.
Shared security engineering
“Managed endpoint security for 2,500+ global assets via CrowdStrike, achieving 99% agent coverage across corporate environments.”
Managing 2,500 global assets using CrowdStrike shows the endpoint security component of shared security engineering. The 99% coverage rate specifies the extent of the implementation.
Okta and IAM administration
“Administered Okta identity environment for 1,200 users, enforcing adaptive MFA policies that blocked 95% of credential-stuffing attempts.”
Managing an environment for 1,200 users and enforcing adaptive MFA policies addresses the core tasks of Okta and IAM administration. The 95% block rate for credential-stuffing shows the effectiveness of these policies.
The whole example as text
Zara Ibrahim · Senior IT Security Engineer
Summary
Senior IT Security Engineer with 7 years of experience in enterprise identity governance and endpoint protection. Automates identity lifecycle management using Okta Workflows and Python scripts to streamline employee provisioning. Orchestrates SAML and SCIM integrations for over 50 SaaS applications to ensure secure access. Leads SOC 2 audit readiness initiatives and manages privileged access control programs to reduce organizational risk.
Experience
Senior IT Security Engineer · Stripe
New York, NY · 2023 - Present
- Automated joiner and leaver workflows using Okta Workflows and Python, resulting in a 75% reduction in manual provisioning tasks.
- Managed endpoint security for 2,500+ global assets via CrowdStrike, achieving 99% agent coverage across corporate environments.
- Spearheaded SOC 2 Type II audit readiness, reducing remediation time for identified access control gaps by 40%.
IT Security Engineer · Plaid
New York, NY · 2021 - 2023
- Administered Okta identity environment for 1,200 users, enforcing adaptive MFA policies that blocked 95% of credential-stuffing attempts.
- Built automated Python-based integrations between HRIS systems and Okta to eliminate manual account synchronization errors.
- Decreased identity-related help desk tickets by 30% through the rollout of a secure self-service access request portal.
Security Analyst · JPMorgan Chase
New York, NY · 2019 - 2021
- Executed quarterly access reviews for 500+ privileged service accounts, identifying and deactivating 150+ orphaned or dormant identities.
- Deployed endpoint security agents across server infrastructure to enhance visibility into unauthorized process execution and lateral movement.
- Supported internal compliance teams by gathering evidence for SOX and SOC 2 audits, achieving 100% adherence to security control definitions.
Education
Bachelor of Science in Computer Science · New York University
New York, NY · 2015 - 2019
- Graduated Magna Cum Laude with a 3.8 GPA
- Member of the Cybersecurity and Privacy Research Group
Skills
Frequently asked questions
Is the example from an employee?
No. It is an AI-written example for this ad, made to show how a resume can answer it.
What is the in-person work requirement?
This is a hybrid role based in New York City. You are expected to be in the office four days per week, including Tuesday through Thursday, plus either Monday or Friday.
Will I be responsible for tasks outside of identity management?
Yes. This is a shared-responsibility team where you will serve as the identity expert but also cover endpoint security, email security, and other IT security projects, including joining the on-call rotation.
Where do I apply?
On the official Alloy posting, through the job link on this page.
What happens when I tailor my resume here?
Your resume opens in the editor next to this job. Tailor it in one click, then keep or discard the edits. You only need an account to download.