Cybersecurity Engineer

SSA Marine; Seattle (WA); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Parental leave

Employee Assistance Program

Paid sick leave

Paid vacation

Company holidays

Bereavement leave

Jury duty

401k plan

Bonuses

Job summary

SSA Marine is seeking a Cybersecurity Engineer focused on Identity and Access Management (IAM) in Seattle. This hands-on role supports enterprise identity services, access controls, authentication, provisioning, and audit-ready practices while coordinating with security, IT operations, and business stakeholders to reduce identity-related risk.

You will implement IAM controls, integrate directory services and cloud apps, assist with incident response and vulnerability management, and address AI

Qualifications

• 5+ years in cybersecurity or related field.
• Bachelor's degree in computer science, cybersecurity, IT, or equivalent experience.
• Solid IAM concepts: authentication, authorization, least privilege, RBAC, privilege access, reviews, lifecycle.
• Familiarity with enterprise IAM like AD, Entra ID, SSO, MFA, conditional access.
• SOC level 2 or incident response experience.
• Scripting/automation experience (Python/PowerShell).
• Knowledge of protocols: SAML, OAuth, OpenID Connect, SCIM, LDAP.
• Understanding of common vulnerabilities and exploitation techniques.
• Familiarity with SAST/DAST tools and AI/LLM risk considerations.
• Familiarity with NIST CSF and NIST 800-53 frameworks.

Responsibilities

• Design, implement, and defend secure IAM-based access controls.
• Assist with incident response and investigations related to identity events.
• Penetration testing and vulnerability assessments across networks, apps, and identity controls.
• Support risk and compliance efforts with audit-ready reporting on identity governance.
• Collaborate with security, IT operations, and business stakeholders to reduce identity-related risk.

Skills

IAM concepts

Scripting

Incident response

Least privilege

Authentication/Authorization

Education

Bachelor's degree in CS/Cybersecurity

Tools

Active Directory

Entra ID

SSO

SAML/OIDC

Job description

We're looking for a Cybersecurity Engineer with a strong focus on Identity and Access Management (IAM) to help design, implement, and defend secure access across our family of companies. This is a hands-on technical role that supports enterprise identity services, access controls, authentication, authorization, provisioning, and audit-ready access practices while maintaining broad responsibility across incident response, vulnerability management, security monitoring, AI system security, and core cybersecurity controls. You'll work closely with security, IT operations, application owners, and business stakeholders to reduce identity-related risk, improve least-privilege access, and translate technical security concerns into practical business action.

• Implement and maintain security controls, building, operating, and improving controls for identity and access management, multifactor authentication, privileged access, single sign-on, conditional access, intrusion detection, network segmentation, and data protection based on established architecture.
• Maintain IAM platform integrations, configuring and troubleshooting integrations with directory services, cloud platforms, SaaS applications, and business systems using established authentication and authorization patterns.
• Assist with detection, triage, containment, and investigation of security incidents, including identity-related events such as suspicious sign-ins, privilege misuse, account compromise, and anomalous access activity.
• Conduct penetration testing and vulnerability assessments, testing across networks, applications, cloud environments, and identity controls. Help track remediation to completion.
• Assess and monitor risks in AI and LLM-based tools, including agentic tools used for internal workflows. Assist with access scoping, connector permissions, identity-based controls, and audit logging under senior guidance.
• Contribute to risk and compliance efforts by documenting and communicating findings related to cyber risk, identity governance, access control effectiveness, and audit readiness. Assist with reporting on security posture and incident trends.
• Apply cybersecurity ethics and compliance standards. Follow relevant law, regulation, and internal policy consistently in daily work.

Qualifications

• 5+ years of experience in cybersecurity, IT security, systems administration, identity and access management, or a related technical field.
• Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• Working knowledge of identity and access management (IAM) concepts, including authentication, authorization, least privilege, role-based access control, privileged access, access reviews, and user lifecycle processes.
• Familiarity with enterprise identity technologies such as Active Directory, Microsoft Entra ID, single sign-on, multifactor authentication, conditional access, or similar IAM platforms and controls.
• SOC level 2 or relevant incident response experience.
• Working knowledge of scripting or automation, such as Python or PowerShell.
• Basic understanding of common identity protocols and integration patterns such as SAML, OAuth, OpenID Connect, SCIM, LDAP, or related technologies is a plus.
• Solid understanding of common vulnerabilities and exploitation techniques.
• Familiarity with SAST and DAST tools and practices.
• Basic understanding of AI and LLM-based tool risks, including prompt injection and data exposure.
• Working knowledge of cybersecurity and identity governance frameworks, including NIST CSF, NIST 800-53, and industry best practices related to identity and access management.
• Reliable, detail-oriented, and comfortable following established processes.
• Good communication skills and willingness to ask for guidance when needed.
• Strong desire to build technical depth and advance toward more autonomous work.
• Relevant certifications a plus, such as Security+, GSEC, Microsoft identity/security certifications, or other IAM-focused credentials.

Supervisory Responsibilities: No

Work Environment

• Required job duties are normally performed in a climate-controlled office environment, or remotely from home.
• Exposure to computer screens.
• The noise level in the work environment is usually moderate.

Pay Range: $130,000 - 160,000 per year

The posted compensation range is based on the applicable geographic market for the position and may vary depending on factors such as related experience and skill set. Final compensation will be determined based on these items and other relevant factors.

The Employer does not sponsor for any immigration-related benefit for this specific position, this includes nonimmigrant status sponsorship, or participation in international student employment-sponsorship programs, or employment-based permanent resident status.

We are Equal Opportunity Employer

Benefits

• Eligible employees (and their families) may qualify for medical, dental, and vision insurance, as well as having basic life and accidental death insurance, paid disability insurance, including paid parental leave if eligible, and an Employee Assistance Program.
• Employees will receive paid sick and vacation time, and company holidays if eligible.
• The company also offers paid bereavement leave, and paid jury duty.
• Eligible employees can enroll in our company's 401k plan, as well as a retirement plan.
• Employees will be eligible for discretionary and/or metric-based bonuses dependent on their position.