Senior Cybersecurity Engineer, Identity & Access Management

CHAOS Industries is seeking a Senior Cybersecurity Engineer, Identity & Access Management to own the identity layer that protects Controlled Unclassified Information and export-controlled technical data. This role's primary goal is to make IdP, IAM, PAM, PIM, and Secrets Management platforms work as one coherent system that meets CMMC Level 2, NIST SP 800-171, DFARS 252.204-7012, and ITAR.

What You Will Do

Design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services. Own and automate the IAM portion of the joiner, mover, and leaver (JML) process across identity, directory, cloud, and secrets platforms.

Why It Might Be a Fit

This is a hands-on role with real influence over where our identity architecture goes next. You'll work alongside security operations, IT, HR, and compliance as the person who turns policy into working access controls, from onboarding through offboarding.

Requirements

• Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field
• 5+ years of progressively responsible cybersecurity engineering experience
• At least two years of experience focused on IAM
• Hands-on experience administering IdP in a production environment
• Hands-on experience administering Entra ID or Active Directory
• Experience running the provisioning, access change, and deprovisioning steps of a JML process
• Experience designing authentication policies and deploying phishing-resistant MFA across an organization
• Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM
• Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs
• Familiarity with NIST SP 800-207, Zero Trust Architecture and NIST SP 800-171 or NIST SP 800-53
• Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework
• Clear written communication, for both technical runbooks and policy documents

Benefits

• Medical, dental, and vision benefits 100% paid for by the company
• 401k (+ 50% company match up to 6% of pay)
• FSA
• HSA
• Life insurance
• Free daily lunch while you're working onsite
• Fully-stocked kitchen
• Unlimited PTO
• Casual dress code
• Relocation assistance
• Generous pre-IPO stock option grants
• Annual bonuses