Security Engineer, IAM
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Responsibilities:
- Serve as the primary liaison between Security and Internal IT for access control, remediation tracking, and security control implementation
- Administer identity and access governance activities, including account lifecycle management, entitlement reviews, privileged access reviews, and account cleanup
- Coordinate recurring access review cycles, including monthly, quarterly, and annual certifications, privileged account reviews, role-change validations, inactive account reviews, and exception management processes
- Manage security exception requests, including intake, documentation, risk assessment support, approval routing, renewals, and status reporting
- Partner with People Operations and Internal IT to reconcile identity data, review orphaned accounts, and drive deprovisioning activities
- Support vulnerability remediation governance, including issue tracking, escalation, and formal exception documentation
- Prepare audit and compliance evidence related to access governance, privileged access management, remediation activities, and exception management
- Develop and maintain dashboards, metrics, and reporting on review completion rates, remediation status, exception aging, and ownership accountability
- Collaborate with Security, Internal IT, GRC, application owners, and business stakeholders on remediation and governance objectives
Requirements:
- Strong knowledge of identity lifecycle administration, access governance, privileged access management, entitlement governance, and deprovisioning workflows
- Knowledge of enterprise identity platforms, directory services, role-based access control (RBAC), and privileged access principles
- Experience coordinating access reviews, resolving account exceptions, and collaborating with technical and non-technical stakeholders
- Strong written and verbal communication skills to facilitate structured review and approval processes
- Ability to maintain audit-ready documentation and evidence within operational processes, SLAs, and governance frameworks
- Knowledge of formal exception management, including approvals, renewals, compensating controls, and risk acceptance procedures
- Familiarity with vulnerability governance, remediation tracking, security metrics, and reporting
- Experience creating dashboards, structured reporting, and metrics for governance and operational decision-making
- Scripting or automation experience supporting access reviews, remediation tracking, reporting, or evidence collection
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field, or equivalent combination of education and professional experience
- Minimum 4–6 years of experience in Identity and Access Management, Security Operations, Access Governance, or closely related security engineering
- Preferred experience with formal exception management programs and audit/compliance activities
- Preferred experience with automation, remediation governance, and security operations reporting
- Relevant certifications such as Security+, SC-300, CISSP, or comparable security and IAM certifications are preferred
- Ability to sit for prolonged periods and work at a computer
- Ability to lift up to 15 pounds at times
Similar Jobs
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
Lead Security Engineer
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Staff Cloud Security Engineer
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.
Cybersecurity Co-Founder / CCO
Cybersecurity co-founder owning and scaling a startup with EWOR, a venture builder supporting entrepreneurs through founder coaching, hiring, distribution, and funding.
Infrastructure & Security Engineer
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.