Identity and Security Engineer

Location: Atlanta, Austin, Houston, Dallas, Miramar, Orlando, Tallahassee, West Palm Beach, Fort Lauderdale, Phoenix, or Charlotte

Schedule: Remote - *Some onsite/local presence is needed*

Employment Type: Full-Time

Compensation: $130-140k

No C2C at this time

Overview

Our client is seeking an Identity & Security Engineer to serve as a lead technical resource responsible for the architecture, engineering, security, and monitoring of enterprise identity services across hybrid environments. This role will focus heavily on Active Directory, Entra ID, Identity and Access Management (IAM), Privileged Access Management (PAM), PKI, identity governance, and cloud identity integrations. The ideal candidate will have deep expertise in Microsoft identity technologies, strong security engineering capabilities, and experience driving modernization initiatives across both on-premises and cloud environments.

Responsibilities

Design, implement, optimize, and maintain enterprise identity platforms including Active Directory Domain Services, Entra ID, Single Sign-On (SSO), and Multifactor Authentication (MFA).

Architect secure identity frameworks utilizing RBAC, Conditional Access, least privilege, and Just-in-Time (JIT) access models.

Develop identity governance programs and access lifecycle management processes.

Lead the design and administration of identity services across hybrid cloud and on-premises environments.

Establish governance and security controls for service accounts, application registrations, and other non-human identities.

Integrate identity platforms with enterprise applications and business systems.

Partner with security, compliance, infrastructure, application, and DevOps teams to implement secure identity practices.

Lead PKI design, hardening initiatives, certificate lifecycle management, and authentication modernization efforts.

Engineer and support privileged access management and secure vendor remote access solutions.

Develop identity monitoring, auditing, and detection capabilities to identify suspicious or anomalous activity.