Identity Security Engineer

ECS is a cybersecurity organization seeking an Identity Security Engineer for its security operations division. The role designs, hardens, and evolves identity systems and Windows server infrastructure, assesses identity architecture against modern security frameworks, reduces identity-based risk, and supports security monitoring and incident response activities.

Responsibilities:

• Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations
• Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging
• Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks
• Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls
• Experience enforcing least privilege, role-based access control (RBAC), and automating access provisioning and deprovisioning workflows
• Familiarity with Zero Trust identity principles — verify explicitly, enforce least privilege, and assume breach — and the ability to assess and mature an organization's identity posture against those principles
• Experience securing workload identities, service principals, and high-risk administrative accounts
• Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication
• Strong experience administering and hardening Windows Server environments in an enterprise setting
• Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective
• Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity lens
• Experience performing system monitoring, reviewing logs, and taking corrective action to maintain server integrity and availability
• Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
• Experience supporting security continuous monitoring efforts including risk assessments and system patching within Windows server environments
• Ability to identify gaps in current identity and server security capabilities and recommend both technical and process-level improvements
• Experience developing and contributing to technical security standards, monitoring standards, and security architecture documentation
• Comfortable working across teams including cybersecurity, networking, systems administration, and technology support partners
• Ability to communicate findings and risks clearly to both technical peers and senior leadership

Requirements:

• • Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations
• • Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging
• • Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks
• • Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls
• • Experience enforcing least privilege, role-based access control (RBAC), and automating access provisioning and deprovisioning workflows
• • Familiarity with Zero Trust identity principles — verify explicitly, enforce least privilege, and assume breach — and the ability to assess and mature an organization's identity posture against those principles
• • Experience securing workload identities, service principals, and high-risk administrative accounts
• • Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication
• • Strong experience administering and hardening Windows Server environments in an enterprise setting
• • Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective
• • Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity lens
• • Experience performing system monitoring, reviewing logs, and taking corrective action to maintain server integrity and availability
• • Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
• • Experience supporting security continuous monitoring efforts including risk assessments and system patching within Windows server environments
• • Ability to identify gaps in current identity and server security capabilities and recommend both technical and process-level improvements
• • Experience developing and contributing to technical security standards, monitoring standards, and security architecture documentation
• • Comfortable working across teams including cybersecurity, networking, systems administration, and technology support partners
• • Ability to communicate findings and risks clearly to both technical peers and senior leadership
• A minimum of 5+ years of progressive experience in identity security and Windows server administration is required, with demonstrated experience operating at an engineering level rather than a purely operational or support capacity
• Candidates with hands-on Zero Trust identity implementation experience will be strongly preferred