Role OverviewThe ideal candidate will have deep experience with Entra ID, Active Directory, identity lifecycle automation, and governing access in regulated enterprise environments. As a Cybersecurity Engineer, you will own and mature our identity security posture across a complex, multi-platform environment, serving as the primary driver of a structured role-based access control (RBAC) program and a trusted technical advisor across infrastructure, IT, and development teams.
What You Will Do
Design and implement enterprise RBAC, lead identity lifecycle automation, govern directory structure and access hygiene, manage non-human identities, advise development teams on identity security, drive Conditional Access and PIM, support Entra External ID governance, and produce compliance-ready documentation.
Why It Might Be a Fit
The ideal candidate will have deep experience with Entra ID, Active Directory, identity lifecycle automation, and governing access in regulated enterprise environments. Ability to communicate risk clearly to non-technical stakeholders and produce compliance-ready documentation.
Requirements
- 5+ years of hands-on IAM engineering experience, with at least 3 years focused on Entra ID (Azure AD) in enterprise environments.
- Deep working knowledge of Active Directory, including group policy, OU design, domain trust models, and hybrid identity patterns.
- Demonstrated experience designing and implementing RBAC models at scale in complex or legacy environments.
- Hands-on experience with Entra ID Governance, including access reviews, entitlement management, lifecycle workflows, and Privileged Identity Management (PIM).
- Strong working knowledge of OAuth 2.0, OIDC, and SAML, sufficient to review developer implementations and identify security risk.
- Practical experience automating identity lifecycle events using Logic Apps, Azure Functions, PowerShell, or the Microsoft Graph API.
- Ability to communicate risk clearly to non-technical stakeholders and produce compliance-ready documentation.
Benefits
- Excellent compensation/benefit package
- Hybrid work model
]]>