Information Security Engineer

<div class="content-intro"><p><a href="http://www.stateaffairs.com/">State Affairs</a> is the nation’s leading news and policy intelligence platform focused on state governments. We combine nonpartisan coverage of Statehouses across the country alongside state government data and AI-native tools into a singular platform.&nbsp;</p> <p>We inform and empower decision makers, policy professionals and citizens through our award-winning journalism and data – delivering profound insights to help our customers decode and act on state politics and&nbsp; policy. We’re building a category-defining business that will reshape America as we strengthen visibility into what’s happening and why at the state level.</p></div><p>We are hiring a Information Security Engineer to own and improve the security systems that protect State Affairs’ employees, devices, SaaS applications, corporate network, and internal data. This role will be responsible for identity and access management, endpoint security, security alert triage, device compliance, security automation, and corporate IT security operations.</p> <p>This is a role for someone who is comfortable operating across security engineering, IT operations, automation, and employee support. You will manage the systems that enable secure onboarding, offboarding, device management, access control, monitoring, and audit readiness across a fast-growing organization.</p> <p>As the Information Security Engineer you will:</p> <ul> <li>Own identity and access management across SSO, directory systems, MFA, SCIM provisioning, and corporate SaaS applications.</li> <li>Manage secure onboarding, offboarding, access changes, and recurring access reviews across employee systems.</li> <li>Administer and improve endpoint security controls across macOS and Windows devices, including MDM, disk encryption, patch compliance, EDR coverage, and device posture reporting.</li> <li>Provision, manage, and de-provision laptops and employee devices using automated MDM tools.</li> <li>Triage and investigate security alerts from identity providers, endpoint security tools, firewalls, VPN/Zero Trust systems, SIEM/logging platforms, and SaaS applications.</li> <li>Support phishing response, suspicious login investigations, endpoint security events, and other corporate security incidents.</li> <li>Maintain and improve corporate network security, including secure Wi-Fi, VLAN basics, VPN/Zero Trust access, firewall hygiene, and office network troubleshooting.</li> <li>Diagnose and resolve multi-platform hardware, software, access, and local network issues for onsite, hybrid, and distributed teams.</li> <li>Build scripts and automations using Python, Bash, PowerShell, or REST APIs to reduce manual work across onboarding, offboarding, access