About OptiFlow Labs OptiFlow Labs is the company behind FailSafe, a SaaS Security Posture Management platform for SMBs running Microsoft 365 and Google Workspace, launched May 2026. We are building a contractor bench of cybersecurity engineers who handle on demand remediation for our customers. About the role When a FailSafe customer needs hands on cleanup based on their security audit findings, we route the engagement to a contractor on our bench. Each engagement is scoped, paid hourly, and typically runs 1 to 8 hours. What you will do

• Remediate identity findings: dormant accounts, unmanaged admin roles, MFA gaps, conditional access misconfiguration
• Review and clean up OAuth grants and third party app permissions
• Address license waste, orphaned mailboxes, and service account exposure
• Document changes made and hand off back to the client with a brief summary
• Coordinate scheduling and admin access with the client point of contact

You should have

• 5 or more years administering Microsoft 365 (Entra ID, Exchange, conditional access) or Google Workspace
• Working knowledge of OAuth scopes, IAM concepts, and SaaS security posture
• Familiarity with at least one of: NIST CSF, CIS v8, SOC 2, ISO 27001:2025
• Comfortable working in client tenants under named, temporary admin access
• Clear written communication for change documentation

Nice to have

• Background at an MSP or in cybersecurity consulting
• Conditional access policy design, M365 Defender, Entra ID Protection
• Experience with vendor risk review or third party SaaS hardening

Engagement structure

• 1099 contract, no minimum hours
• $150 per hour, paid biweekly
• Remote, United States based
• Flexible hours that fit supplemental work schedules
• NDA and background check required before first engagement