IT & Security Engineer
Company: govworx
Location: United States (Remote)
Salary: $110k - $130k per year
Type: Full-time
Remote: Yes
Posted: 2026-06-18
About this role
# IT & Security Engineer
Location: Remote (U.S. Based)
Type: Full Time
Overview
We are seeking a IT & Security Engineer to own GovWorx’s security engineering and IT infrastructure. This is a senior individual contributor role responsible for architecture, hands-on delivery, and technical leadership across identity, endpoint, security operations, and compliance.
The ideal candidate brings deep expertise in IAM, endpoint management, and security engineering, and is equally comfortable designing systems and getting into the details. You will serve as the primary technical lead for IT and security initiatives, partnering closely with the Head of IT & Security and cross-functional teams to maintain a strong security posture as GovWorx scales.
Experience in regulated or compliance-driven environments is highly valued. You will play a critical role in protecting the systems and data that public safety professionals rely on every day.
Key Responsibilities
• Own architecture strategy and hands-on delivery for IT & Security engineering initiatives.
• Translate security and IT objectives into actionable workflows, automation patterns, and documentation.
• Mentor team members on technical troubleshooting, configuration, and best practices; foster a security-first culture.
• Evaluate and recommend technologies to improve security posture, service reliability, and operational efficiency.
• Own end-to-end identity lifecycle management using Okta as the primary IAM platform.
• Maintain and refine RBAC/ABAC models, least-privilege controls, and provisioning workflows.
• Implement and support SSO, MFA, SCIM, conditional access, and session security controls.
• Conduct periodic access reviews and maintain audit documentation for GovWorx compliance frameworks.
• Serve as SME for Jamf (macOS) and Intune (Windows): secure baselines, configuration profiles, provisioning, and compliance enforcement.
• Maintain Zero Trust device posture: encryption, patching...