Cyber Security Analyst II, IAM Engineer

Yum! Brands; Plano (TX); On-site; USD 118,000 - 148,000; Full time

Job summary

Yum! Brands in Plano, TX is seeking a Cyber Security Senior Engineer II to lead Microsoft Entra ID/Azure AD security, governance, and hybrid identity operations. This senior IC role advances enterprise identity services across cloud and on-prem environments.

You will administer Entra ID, manage RBAC, MFA, passwordless, and CA policies, collaborate with Infrastructure, Cyber Security, HR, and Apps teams, and contribute to assessments, automation with PowerShell and Graph, and evidence for audits.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, or related field.
• 4–7 years in cybersecurity, IAM, or related.
• 10 years of Entra ID / Azure Active Directory engineering and administration experience.
• Experience supporting hybrid identity environments.
• Experience working within enterprise Microsoft 365 environments.
• Experience with security controls, access governance, or audit activities.
• Experience scripting or automating administrative tasks using PowerShell.

Responsibilities

• Administer and support Microsoft Entra ID and hybrid Active Directory environments.
• Support identity lifecycle management processes including onboarding, transfers, and offboarding.
• Configure and maintain role-based access controls (RBAC).
• Develop and automate identity-related processes using PowerShell and Graph.
• Investigate identity-related security findings and assist with remediation.
• Participate in security assessments and vulnerability reduction initiatives.
• Collaborate with Infrastructure, Cyber Security, Cloud Engineering, HR, and App teams to support IAM initiatives.

Skills

Microsoft Entra ID

Azure Active Directory

Group Policy

PowerShell scripting

Conditional Access

MFA / Passwordless

Microsoft Graph

PIM

Cloud Security

Education

Bachelor's degree in IT / Cybersecurity / CS

Tools

PowerShell

Microsoft Graph

Azure CLI

Job description

Position Summary

The Cyber Security SR Engineer II is a senior-level Active Directory Entra ID SR Engineer professional responsible for supporting, administering, and enhancing Yum's Microsoft Entra ID (Azure Active Directory) environment. This role contributes to the security, governance, and operational effectiveness of enterprise identity services across cloud and hybrid infrastructures.

This position aligns with Level 8 expectations within the Yum Technology Job Leveling Framework, serving as a senior individual contributor who is continuing to expand technical expertise and influence.

Identity & Access Management

• Administer and support Microsoft Entra ID and hybrid Active Directory environments.
• Support identity lifecycle management processes including onboarding, transfers, and offboarding.
• Configure and maintain role-based access controls (RBAC).
• Administer and support:
• Run existing process and collections
• Develop new process
• Automate processes
• Assessment reviews and mitigation
• Security Hardening
• Group Policy
• Access Reviews
• Identity Protection
• Passwordless Authentication
• Multifactor Authentication (MFA)
• Conditional Access Policies
• Troubleshoot complex authentication, access, and identity-related issues.

Security Operations & Engineering

• Implement and maintain identity security controls to protect enterprise user and privileged accounts.
• Investigate identity-related security findings and assist with remediation activities.
• Participate in security assessments, penetration testing remediation efforts, and vulnerability reduction initiatives.
• Contribute to the evaluation and testing of emerging IAM technologies and capabilities.
• Support secure integration of applications with enterprise identity platforms.

Governance, Risk & Compliance

• Support compliance assessments and control validation activities.
• Participate in access certification and entitlement review processes.
• Assist with evidence collection and audit activities related to:
• Vender assessment process
• Internal assessment processes
• Cybersecurity Framework (CSF)
• CIS Controls
• PCI-DSS
• NIST
• Ensure identity management processes align with corporate security policies and standards.

Automation & Process Improvement

• Develop and maintain automation solutions using PowerShell and Microsoft Graph.
• Identify opportunities to improve operational efficiency and enhance security through automation.
• Assist in developing operational monitoring, reporting, and alerting capabilities.
• Contribute to process documentation and standardization efforts.

Collaboration

• Partner with Infrastructure, Cyber Security, Cloud Engineering, HR, and Application teams to support IAM initiatives.
• Provide technical input during security reviews and project engagements.
• Share knowledge and best practices with team members.
• Build effective relationships across teams to support successful delivery of IAM services.
• Clearly communicate technical issues, risks, and recommendations to stakeholders

Education

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Equivalent professional experience may be considered in lieu of degree requirements.

Experience

• 4-7 years of cybersecurity, systems engineering, IAM, or related experience.
• 10 years of Microsoft Entra ID / Azure Active Directory Engineering and Administration experience.
• Experience supporting hybrid identity environments.
• Experience working within enterprise Microsoft 365 environments.
• Experience with security controls, access governance, or audit activities.
• Experience scripting or automating administrative tasks using PowerShell.
• Experience Active Directory Group Policy administration and design
• Experience Active Directory tiering design and administration
• Experience with Active Directory hardening

Technical Skills

• Microsoft Entra ID HPA administration
• Active Directory HPA administration
• Active Directory Group Policy
• Active Directory permission assignments
• Active Directory Tiering
• Active Directory PowerShell scripting and automation
• Azure/Microsoft Cloud Security
• Microsoft Graph
• Conditional Access
• MFA and Passwordless Authentication
• PIM

Preferred Certifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Security+, CISSP, CCNA or equivalent security certification

Salary Range: $117,800 to $147,600 annually + bonus eligibility. This is the expected salary range for this position. Ultimately, in determining pay, we’ll consider the successful candidate’s location, experience, and other job-related factors.