Our company

  • Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. It serves hundreds of financial institutions across 40 countries with institutional-grade APIs.

Your position

  • Own security standards and controls protecting workforce identities, endpoints, and critical systems.
  • Define and maintain IAM/SSO standards across cloud, SaaS, and internal apps.
  • Own MFA standards (phishing-resistant methods) and enforcement.
  • Maintain privileged-access standards and access reviews.
  • Partner with IT/People teams on joiner/mover/leaver processes.

Requirements

  • 3+ years of experience in IT security, identity security, or security engineering.
  • Hands-on experience with an identity provider and SSO (SAML and OIDC).
  • Experience enforcing phishing-resistant MFA (e.g., FIDO2 or hardware security keys).
  • Hands-on experience with an endpoint detection and response platform.
  • Scripting or automation experience (Python, Bash, or PowerShell). Use of automation to support security workflows.

Compensation & benefits

  • Competitive Salary & Stock Options
  • Health Benefits
  • New Hire Home-Office Setup: One-time USD $500
  • Monthly Stipend: USD $150 per month via a Brex Card
  • 100% distributed remote team/remote work arrangement