Cyber Security Analyst II, IAM Engineer

LCS is seeking a Cyber Security Analyst II to serve as a senior Identity and Access Management engineer. The role focuses on securing and administering Microsoft Entra ID and hybrid Active Directory environments, implementing authentication and privileged access controls, supporting compliance initiatives, automating identity operations, and guiding stakeholders and junior team members.

Responsibilities:

• Engineer, administer, and support Microsoft Entra ID and hybrid Active Directory environments
• Design and maintain identity lifecycle management processes, including onboarding, transfers, and offboarding
• Administer role-based access controls (RBAC) and privileged access management solutions
• Manage and optimize: Conditional Access Policies, Multifactor Authentication (MFA), Passwordless Authentication, Identity Protection, Access Reviews, Entitlement Management, Privileged Identity Management (PIM)
• Implement security controls to protect enterprise identities and privileged accounts
• Investigate and remediate identity-related security findings and vulnerabilities
• Support remediation efforts resulting from penetration tests, audits, and security assessments
• Evaluate emerging Identity and Security technologies and recommend adoption strategies
• Conduct compliance assessments and evidence gathering utilizing frameworks such as: NIST, PCI-DSS, CIS Controls, Security Control Framework (CSF)
• Lead periodic entitlement reviews and access certification processes
• Develop automation solutions using PowerShell and Microsoft Graph
• Streamline identity operations through process improvements and workflow automation
• Improve operational monitoring, logging, and alerting capabilities
• Create repeatable processes that increase security and reduce operational overhead
• Serve as an Identity and Access Management subject matter expert
• Partner with Infrastructure, Cyber Security, Cloud Engineering, HR, and Application teams
• Mentor junior engineers and analysts
• Provide technical guidance during security reviews and project engagements
• Communicate technical risks and recommendations to management and business stakeholders

Requirements:

• • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline
• • Equivalent work experience may be considered
• • 5+ years of cybersecurity, systems engineering, or IAM experience
• • 3+ years administering Microsoft Entra ID / Azure Active Directory
• • Experience supporting hybrid identity architectures
• • Experience with audit, compliance, and governance activities
• • Experience supporting enterprise-scale Microsoft 365 environments
• • Microsoft Certified: Identity and Access Administrator Associate
• • Microsoft Certified: Azure Security Engineer Associate
• • Microsoft Certified: Cybersecurity Architect Expert
• • CISSP, Security+, or equivalent industry certifications