Support the modernization of Identity and Access Management and Identity Governance capabilities, including authentication, authorization, and least-privilege access models using technologies such as MFA, SAML, OAuth, and conditional access.-Design and maintain enterprise security platforms that enforce security policies across endpoints, cloud environments, and enterprise networks.-Enhance enterprise email security to protect against phishing, malware, and business email compromise.-Collaborate with infrastructure and cloud engineering teams to implement security controls across hybrid environments.-Develop automation and integrations using tools such as PowerShell, Python, and platform APIs to improve scalability and consistency of security controls.-Provide engineering guidance to ensure systems are built according to secure-by-design and defense-in-depth principles. -Bachelor’s degree in Computer Science, Engineering, Information Security, or related field.-6+ years of experience in security engineering, infrastructure engineering, or cloud security.-Experience implementing Zero Trust architectures, preferably with Zscaler ZIA and ZPA.-Experience designing or implementing IAM and identity governance solutions.-Experience working with enterprise email security technologies.-Experience with Microsoft cloud and security platforms such as Microsoft- Defender and Microsoft Purview.-Strong understanding of authentication and access technologies including MFA, SAML, OAuth, and conditional access.-Scripting or automation experience using PowerShell, Python, or similar tools.