Microsoft Identity Cybersecurity Jobs

1 job found

Today

Senior Cybersecurity Engineer, Identity & Access Management

CHAOS Industries El Segundo, CA

El Segundo, CA

Today

$140k - $200k/yr Full time Senior Cloud Identity And Access Management Engineer

Apply Now

Job Description

Own the identity layer that protects Controlled Unclassified Information and export-controlled technical data through secure IAM, authentication, and access controls.

Responsibilities

Design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services.
Own and automate the IAM portion of joiner, mover, leaver (JML) processes across identity, directory, cloud, and secrets platforms to provision at hire, adjust on role changes, and revoke promptly at departure.
Coordinate with Human Resources and IT teams that manage employee record ownership and device steps.
Design and tune authentication policies, conditional access, phishing-resistant MFA, and device compliance requirements.
Build identity-focused detections and support threat hunts in SIEM, EDR, and SOAR tools; support SOC activities during identity-related investigations.
Operate and mature a tiered administrative model, including privileged access workstations (PAWs) and dedicated administrator accounts.
Administer privileged identity management for just-in-time role activation and privileged access reviews.
Administer the enterprise password and secrets management platform, including role-based enforcement policies, vault structure, SSO integration, and vaulting of privileged and shared credentials.
Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation.
Integrate SaaS and internal applications using SSO with SAML and OpenID Connect, and automate provisioning via SCIM.
Maintain Active Directory security, including account lifecycle hygiene, service accounts, and group Managed Service Accounts (gMSAs); perform ongoing attack path analysis.
Run periodic access reviews and produce assessment evidence for NIST SP 800-171 (AC and IA families).
Write and maintain IAM policies, standards, and procedures.

Requirements

Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, IT, information assurance, or related field, plus 5+ years of progressively responsible cybersecurity engineering experience; or Master’s degree with 3+ years relevant experience.
2+ years focused on IAM.
Hands-on experience administering an IdP in a production environment.
Hands-on experience administering Entra ID or Active Directory.
Experience executing provisioning, access change, and deprovisioning steps of a JML process.
Experience designing authentication policies and deploying phishing-resistant MFA across an organization.
Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs.
Familiarity with NIST SP 800-207, Zero Trust Architecture, and NIST SP 800-171 or NIST SP 800-53.
Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework.
Clear written communication for technical runbooks and policy documents.

Technologies

PowerShell, Python
Kerberos, NTLM, LDAP
SAML, OAuth 2.0, OpenID Connect, SCIM
Entra ID, Active Directory
BloodHound, PingCastle
Elasticsearch Query Language (ES|QL), Kusto Query Language (KQL)

Benefits

Medical, dental, and vision benefits 100% paid by the company
401k with +50% company match up to 6% of pay
FSA, HSA
Life insurance
Free daily lunch while onsite
Fully-stocked kitchen
Unlimited PTO
Casual dress code
Competitive base salaries
Generous pre-IPO stock option grants
Relocation assistance
Annual bonuses (coming soon)

Preferred Requirements

Experience with IAM in a cloud platform such as Microsoft Azure or AWS.
Experience administering an enterprise password or secrets management platform.
Experience with identity automation platforms.
Experience with Microsoft 365 GCC High or another US government cloud environment.
Experience implementing PIM, PAWs, or a tiered administrative model.
Experience with Active Directory attack path analysis tools such as BloodHound or PingCastle.
Proficiency in a query language such as ES|QL, KQL, or similar.
Experience deploying certificate-based authentication or FIDO2 security keys.
A relevant certification such as Microsoft Certified: Identity and Access Administrator Associate (SC-300) or CISSP.
Experience working in the Defense Industrial Base (DIB).

Compensation: $140,000 - $200,000 (per year)

Location: El Segundo, CA (onsite)

View full job page →

Get Microsoft Identity Cybersecurity Jobs alerts

New Microsoft Identity Cybersecurity Jobs, daily.