Cybersecurity Engineer, Contract (M365 and Google Workspace, Remote)
About OptiFlow Labs OptiFlow Labs is the company behind FailSafe, a SaaS Security Posture Management platform for SMBs running Microsoft 365 and Google Workspace, launched May 2026. We are building a contractor bench of cybersecurity engineers who handle on demand remediation for our customers. About the role When a FailSafe customer needs hands on cleanup based on their security audit findings, we route the engagement to a contractor on our bench. Each engagement is scoped, paid hourly, and typically runs 1 to 8 hours. What you will do
- Remediate identity findings: dormant accounts, unmanaged admin roles, MFA gaps, conditional access misconfiguration
- Review and clean up OAuth grants and third party app permissions
- Address license waste, orphaned mailboxes, and service account exposure
- Document changes made and hand off back to the client with a brief summary
- Coordinate scheduling and admin access with the client point of contact
You should have
- 5 or more years administering Microsoft 365 (Entra ID, Exchange, conditional access) or Google Workspace
- Working knowledge of OAuth scopes, IAM concepts, and SaaS security posture
- Familiarity with at least one of: NIST CSF, CIS v8, SOC 2, ISO 27001:2025
- Comfortable working in client tenants under named, temporary admin access
- Clear written communication for change documentation
Nice to have
- Background at an MSP or in cybersecurity consulting
- Conditional access policy design, M365 Defender, Entra ID Protection
- Experience with vendor risk review or third party SaaS hardening
Engagement structure
- 1099 contract, no minimum hours
- $150 per hour, paid biweekly
- Remote, United States based
- Flexible hours that fit supplemental work schedules
- NDA and background check required before first engagement