Identity Security Engineer

Required Skills

• Identity Security
• Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations
• Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging
• Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks
• Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls
• Experience enforcing least privilege, role-based access control (RBAC), and automating access provisioning and deprovisioning workflows
• Familiarity with Zero Trust identity principles — verify explicitly, enforce least privilege, and assume breach — and the ability to assess and mature an organization's identity posture against those principles
• Experience securing workload identities, service principals, and high-risk administrative accounts
• Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication
• Windows Server
• Strong experience administering and hardening Windows Server environments in an enterprise setting
• Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective
• Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity lens
• Experience performing system monitoring, reviewing logs, and taking corrective action to maintain server integrity and availability
• Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including risk assessments and system patching within Windows server environments
• Security Engineering & Collaboration
• Ability to identify gaps in current identity and server security capabilities and recommend both technical and process-level improvements
• Experience developing and contributing to technical security standards, monitoring standards, and security architecture documentation