Senior Information Security Engineer - IAM

About the role

You will provide cybersecurity assurance by identifying and reducing enterprise risks, designing security controls, and leading security-focused initiatives. You will focus on Identity and Access Management across cloud, on-premises, and SaaS environments while partnering with infrastructure, application, cloud, and business teams.

Responsibilities

• Design, implement, and operate enterprise solutions including Identity Governance and Administration (IAM), Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and directory services.
• Serve as the senior technical IAM subject matter expert, defining technical requirements, troubleshooting complex identity lifecycle issues, and managing enterprise IGA platforms.
• Lead identity security architecture and engineering efforts aligned with Zero Trust and least-privilege principles across hybrid environments including Entra ID and Active Directory.
• Integrate IAM controls with applications, cloud platforms, and third-party services to ensure secure, scalable access.
• Identify, evaluate, and reduce identity-related risks including excessive access, orphaned accounts, and privileged account misuse; lead IAM risk assessments and communicate findings to partners.
• Define, implement, and improve IAM policies, standards, and access controls.
• Automate and optimize identity processes using APIs, PowerShell, Terraform, or related technologies.
• Lead IAM-related cybersecurity initiatives including pilots and proof-of-concepts using security best practices and maturity models.
• Support audits, risk assessments, and compliance efforts related to identity.
• Partner with Security Operations and incident response teams to support identity threat detection and response.
• Provide technical leadership and mentorship within IAM and Security teams while staying current on emerging technologies and industry trends.

Requirements

• Bachelor’s degree in computer science, information technology, or a related technical field.
• Over five years of experience in information security or cybersecurity with a focus on Identity and Access Management.
• Hands-on experience with Entra ID, Active Directory, enterprise IGA platforms (such as SailPoint, Saviynt, or Entra ID Governance), and PAM tools (such as CyberArk, BeyondTrust, or Delinea).
• Knowledge of authentication and authorization technologies including SAML, OAuth 2.0, OpenID Connect, Kerberos, identity lifecycle management, and Zero Trust / least-privilege security models.
• Experience securing hybrid and cloud-first identity environments.
• Familiarity with security frameworks and standards including NIST CSF, NIST, ISO, CVSS, and ITIL.
• Skill in leading initiatives in a matrixed organization and managing projects.
• Strong organizational, verbal, and written communication skills with the capacity to deliver clear, detailed reporting.
• Strong aptitude for learning and applying new technologies and concepts.
• Experience contributing to or developing enterprise security strategies and roadmaps.
• Willingness to travel up to 10 percent.

Qualifications

• None specified

Skills

• Hands-on experience with IAM tools and technologies.
• Experience with Zero Trust and least-privilege security models.
• Experience with hybrid and cloud-first identity environments.
• Experience with security frameworks and standards.
• Strong communication and mentoring skills.
• Ability to learn and apply new technologies and concepts.

Benefits

We offer a comprehensive benefits package including health, wealth, growth, balance, and more. Learn more about our benefits here.