Identity Security Engineer

We need to output HTML fragment with sections for headings where content exists. Must not repeat job title. Must not include boilerplate like EEO, legal, application instructions, etc. Must include sections only if real specific content. We need to parse the posting. Content: - Intro: "Why work for us? A career at Janus Henderson is more than a job, it’s about investing in a brighter future together . Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right. Our Values are key to driving our success, and are at the heart of everything we do: Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust If our mission, values, and purpose align with your own, we would love to hear from you!" That's a paragraph about mission/values. Could be under "About the role"? Actually "About the role" is typical heading. But we have mission/values description. Could put under "About the role" or maybe "About Janus Henderson". The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map content to these headings. We have sections: - "Your opportunity The Identity Security Engineer is a hands-on security engineering role focused on securing privileged access and identities across JHI. The role is primarily responsible for designing, implementing, and operating Privileged Access Management (PAM) controls, ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle. In addition, the engineer will support identity threat detection and response capabilities, investigate identity-related security events, maintain data access governance tooling, and develop security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk." That's responsibilities. - "What to expect when you join our firm Hybrid working and reasonable accommodations Generous Holiday policies Excellent Health and Wellbeing benefits including corporate membership to Wellhub Paid volunteer time to step away from your desk and into the community Support to grow through professional development courses, tuition/qualification reimbursement and more Maternal/paternal leave benefits and family services Unique employee events and programs including a 14er challenge Complimentary beverages, snacks and all employee Happy Hours" That's benefits. - "Must have skills" list: many bullet-like sentences separated by periods. We need to extract as list items. - "Nice to have skills": list. - "Supervisory responsibilities No" (maybe not needed). Could be omitted. - "Potential for growth Mentoring Leadership development programs Regular training Career development services Continuing education courses" That's maybe under Benefits or maybe under "Professional development". Could be part of Benefits. - "Compensation information The base salary range for this position is $90,000 to $100,000. This range is estimated for this role. Actual pay may be different. This position will be open through October 2026. Colorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed." We need Pay section: include salary range. Also maybe note about closing date? Probably not needed as it's metadata; we can drop or put in short p. The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it. So we can include a short p for the closing date maybe. - "Annual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance." That's also compensation/benefits. - "Benefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here ." That's benefits again but generic; we already have specific benefits listed earlier. Might be redundant; we can keep the specific benefits and maybe not include this generic line. We must remove boilerplate: EEO, equal opportunity, background checks, etc. Also remove "Janus Henderson Investors is an equal opportunity employer..." etc. Also remove "All applications are subject to background checks." etc. Also remove "Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations..." etc. Also remove "You should be willing to adhere to the provisions of our Investment Advisory Code of Ethics..." etc. Also remove "Applicants’ past political contributions or activity may impact applicants’ eligibility for this position." etc. Also remove "You will be expected to understand the regulatory obligations..." etc. Also remove "Why work for us?" maybe we keep as part of About the role? The instruction: Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should have headings exactly those strings? It says e.g., so we can use those headings. Likely we should use those exact headings when we have content. Thus we need sections: - About the role: could contain mission/values and description of role? The "Your opportunity" paragraph is basically role description. Could also include mission/values as about the company. We'll put mission/values and role description under About the role. - Responsibilities: the paragraph after "Your opportunity" maybe already covered. Actually "Your opportunity" includes responsibilities. We could split: About the role includes mission/values and brief overview; Responsibilities includes detailed duties. - Requirements: maybe "Must have skills" and "Nice to have skills" could be under Requirements and Skills? The instruction includes Requirements, Qualifications, Skills. We could put Must have skills under Requirements, Nice to have under Skills, or combine. - Benefits: the list of benefits. - Pay: salary range and bonus. - Schedule: maybe hybrid working? Could be under Benefits or Schedule. The posting mentions "Hybrid working and reasonable accommodations". That's schedule/flexibility. So we can put Schedule section with hybrid working. We must not create sections with filler like "commensurate with experience". We have actual content. Now we need to output only HTML fragment, no /, no markdown. We'll produce something like:

About the role

...

Responsibilities

• ...
...

Requirements

• ...
...

Skills

• ...
...

Benefits

• ...
...

Pay

...

Schedule

Hybrid working and reasonable accommodations.

We need to ensure we preserve all substantive information. Let's extract details. About the role: combine mission/values and brief role overview. Mission/values text: "Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right. Our Values are key to driving our success, and are at the heart of everything we do: Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust If our mission, values, and purpose align with your own, we would love to hear from you!" We can keep that as a paragraph. Then role overview: "The Identity Security Engineer is a hands-on security engineering role focused on securing privileged access and identities across JHI. The role is primarily responsible for designing, implementing, and operating Privileged Access Management (PAM) controls, ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle. In addition, the engineer will support identity threat detection and response capabilities, investigate identity-related security events, maintain data access governance tooling, and develop security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk." We could combine into About the role paragraph(s). Might be two paragraphs. Responsibilities: maybe we can extract specific duties from that same paragraph? But we already used it. Could instead put responsibilities as bullet list of duties: designing, implementing, operating PAM controls; ensuring privileged users etc; support identity threat detection and response; investigate identity-related security events; maintain data access governance tooling; develop security metrics and automation; etc. But we already used that paragraph in About the role. To avoid duplication, we could split: About the role includes mission/values and brief overview; Responsibilities includes detailed duty list. Let's extract duties from the paragraph: - Designing, implementing, and operating Privileged Access Management (PAM) controls - Ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle - Supporting identity threat detection and response capabilities - Investigating identity-related security events - Maintaining data access governance tooling - Developing security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk We can make each a

. Now Requirements: Must have skills list. Let's parse the "Must have skills" section: "Must have skills Strong understanding of Privileged Access Management (PAM) principles, including least privilege, just-in-time access, ephemeral access, privileged session management, secrets management, and credential vaulting.Ability to investigate, triage, and resolve PAM and identity-related incidents, requests, and operational issues while driving root-cause remediation.Experience administering and engineering enterprise PAM platforms such as Britive, CyberArk, Delinea, or equivalent.Experience designing, implementing, and operating privileged access controls across on-premise and cloud environments.Experience onboarding and governing privileged users, service accounts, machine identities, APIs, workload identities, and other non-human identities throughout their lifecycle.Experience securing and managing privileged access for automation platforms, cloud workloads, DevOps tooling, and emerging AI/agentic systems.Experience configuring and maintaining identity security and data access governance platforms, including Active Directory/Entra ID auditing, permissions analysis, access monitoring, and security reporting.Strong understanding of Identity Access Governance (IAG) concepts and integrations between PAM, IAG, and ITSM platforms, such as SailPoint Identity Security Cloud (ISC) and ServiceNow, with experience supporting identity lifecycle management, provisioning workflows, and troubleshooting workflow issues.Experience working with Active Directory, Entra ID, federation, authentication, access control, and modern identity security architectures.Experience developing security metrics, KPIs, dashboards, and reporting that measure control effectiveness, operational performance, adoption, and risk reduction in an automated manner." We need to split into sensible list items. Each sentence separated by a period. We'll make each a

. Now Skills: Nice to have skills list. "Nice to have skills Experience with Identity Threat Detection & Response (ITDR) and identity-centric threat monitoring.Experience with User and Entity Behaviour Analytics (UEBA) platforms.Experience creating, tuning, or maintaining identity-focused detections, analytics, and use cases within a SIEM platform.Understanding of identity-focused attack techniques including account compromise, privilege escalation, credential theft, lateral movement, and insider threats.PowerShell and/or Python scripting experience for automation and operational efficiency.Experience integrating identity platforms with SIEM, SOAR, and security operations tooling.Experience monitoring and securing non-human identities, machine identities, and AI agents.Knowledge of AI agent security, non-human identity governance, MCP security, delegated permissions, workload identities, and AI-related identity threats." Make each a

. Now Benefits: from "What to expect when you join our firm" list. Let's extract: - Hybrid working and reasonable accommodations - Generous