Cyber Security Engineer

Red Sky Consulting; Austin (TX); On-site; USD 140,000 - 200,000; Full time

Job summary

Red Sky Consulting seeks a Senior Identity Security Engineer to design, implement, and operate enterprise IAM and identity governance solutions. The role focuses on authentication, authorization, and Zero Trust controls across cloud and on-prem environments.

You will engineer MFA, passwordless methods, and conditional access while automating lifecycle processes and integrations with HR systems and SaaS apps. Strong scripting and Graph API skills are required.

Qualifications

• Bachelor's degree or higher in CS/InfoSec or related field.
• 6+ years in Identity Engineering or Security Engineering.
• Experience with Entra ID, Active Directory, or similar IAM platforms.
• Experience implementing IAM and Identity Governance solutions.
• Experience with Conditional Access, MFA, SAML, OAuth, OpenID Connect, SCIM.
• PowerShell and Microsoft Graph proficiency.
• Experience integrating SaaS apps using enterprise SSO.
• Familiarity with Zero Trust architecture and identity security best practices.

Responsibilities

• Design and implement enterprise IAM solutions.
• Engineer authentication and authorization architectures using SAML, OAuth, OpenID Connect, SCIM, and modern authentication standards.
• Design and maintain Conditional Access policies and adaptive authentication controls.
• Implement and maintain MFA, passwordless authentication, and phishing-resistant authentication technologies.
• Engineer lifecycle automation for Joiner, Mover, and Leaver processes.
• Design and implement Identity Governance Administration capabilities.
• Develop RBAC and entitlement models.
• Automate access reviews, certifications, and segregation-of-duty controls.
• Develop integrations between HR systems, directories, SaaS, and business apps.
• Implement identity-centric Zero Trust controls and integrate with Zscaler ZPA where appropriate.
• Develop PowerShell, Python, Graph API, REST API, and SCIM automation.

Skills

IAM

SAML

OAuth

OpenID Connect

SCIM

MFA

Passwordless authentication

Zero Trust

RBAC

PowerShell

Python

Graph API

REST API

Entra ID

Active Directory

NIST/CIS controls

Identity Governance

Education

Bachelor's degree in Computer Science or Information Security

Tools

Microsoft Graph

Zscaler ZPA

Job description

Senior Identity Security Engineer - Can sit in Denver, CO, Austin, TX or Chicago, IL

About the Role

The Senior Identity Security Engineer is responsible for designing, implementing, and operating the organization's identity and access security solutions. This role owns authentication, authorization, identity governance, privileged access, and Zero Trust identity controls that protect users, applications, and enterprise data.

Working closely with Security Engineering, Infrastructure, Cloud Engineering, HR Systems, and Application teams, this engineer develops scalable identity solutions that automate access, enforce least privilege, and improve the organization's security posture.

Key Responsibilities

Identity Engineering

• Design and implement enterprise Identity and Access Management (IAM) solutions.
• Engineer authentication and authorization architectures using SAML, OAuth, OpenID Connect, SCIM, and modern authentication standards.
• Design and maintain Conditional Access policies and adaptive authentication controls.
• Implement and maintain MFA, passwordless authentication, and phishing-resistant authentication technologies.
• Engineer lifecycle automation for Joiner, Mover, and Leaver processes.

Identity Governance

• Design and implement Identity Governance Administration (IGA) capabilities.
• Develop role-based access control (RBAC) and entitlement models.
• Automate access reviews, certifications, and segregation-of-duty controls.
• Develop integrations between HR systems, directories, SaaS platforms, and business applications.

Zero Trust Identity

• Implement identity-centric Zero Trust controls.
• Integrate identity posture with Zscaler ZPA where appropriate.
• Design least-privilege access models across cloud and on-premises environments.

Automation

• Develop PowerShell, Python, Graph API, REST API, and SCIM automation.
• Build identity provisioning and reporting workflows.
• Develop operational dashboards and compliance reporting.
• Provide identity architecture guidance for new applications.
• Partner with application owners to integrate enterprise identity standards.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 6+ years of Identity Engineering or Security Engineering experience.
• Experience with Entra ID, Active Directory, or similar identity platforms.
• Experience implementing IAM and Identity Governance solutions.
• Experience with Conditional Access, MFA, SAML, OAuth, OpenID Connect, SCIM.
• Experience with PowerShell and Microsoft Graph.
• Experience integrating SaaS applications using enterprise SSO.
• Familiarity with Zero Trust architecture.
• Experience with NIST, CIS Controls, and identity security best practices.