Cybersecurity Engineer – IAM & Endpoint Security

Pivotal Solutions; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Pivotal Solutions is seeking a Cybersecurity Engineer – IAM & Endpoint Security for a client based in New York, NY. You will lead design and engineering of identity, endpoint, and privileged access security across a global hybrid environment.

This role blends hands-on engineering with architecture, focusing on scalable, automated, risk-informed solutions grounded in Zero Trust principles. Preferred CISSP/CISM certifications.

Qualifications

• 7+ years of cybersecurity engineering experience.
• Deep hands-on IAM, endpoint security, and PAM expertise.
• Experience in on-premises and cloud hybrid environments.
• Ability to translate architecture into practical engineering.
• Preferred CISSP or CISM certifications.

Responsibilities

• Lead implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.
• Own identity lifecycle management, endpoint security, and access governance.
• Drive automation and operational efficiency in provisioning, compliance, and access support.
• Apply Zero Trust principles and threat modeling to security design.
• Partner with Cyber Operations to enhance detection and response capabilities.
• Conduct risk assessments focusing on identity compromise and endpoint threats.
• Collaborate with global teams and mentor engineers on security practices.

Skills

IAM

Endpoint security

Privileged access management

Hybrid environments

Zero Trust

Automation scripting

Job description

Our client, based in New York, NY, is looking to hire a Cybersecurity Engineer – IAM & Endpoint Security.

I have listed below a detailed job description for your review.

Job Description:

Our client is seeking a Cybersecurity Engineer – IAM & Endpoint Security to lead the design and engineering of identity, endpoint, and privileged access security capabilities across a global hybrid environment.

This role combines hands‑on engineering expertise with architectural alignment, focusing on scalable, automated, and risk-informed solutions grounded in Zero Trust principles.

Key Responsibilities

• Lead the implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.
• Own identity lifecycle management, endpoint security, and access governance, ensuring secure configurations and consistent enforcement of standards.
• Drive automation and operational efficiency across provisioning, compliance, and access management processes.
• Apply Zero Trust principles and threat modeling to strengthen identity and endpoint security design.
• Partner with Cyber Operations to enhance detection, response, and control monitoring capabilities.
• Conduct risk assessments and control validation, focusing on identity compromise and endpoint threats.
• Collaborate with global teams and mentor engineers to promote consistent, scalable security practices.

Qualifications and Experience

• 7+ years of experience in cybersecurity engineering.
• Strong hands‑on expertise in IAM, endpoint security, and privileged access management.
• Experience in hybrid environments (on-premises and cloud).
• Ability to translate architectural principles into practical engineering solutions.
• Preferred Certifications: CISSP, CISM, or equivalent.

Technical Expertise

• Identity and Access Management (authentication, authorization, federation, governance)
• Privileged Access Management and least privilege enforcement
• Endpoint security, hardening, and threat detection/response
• Device management and endpoint compliance
• Zero Trust architecture and identity‑centric security models
• Threat modeling and risk‑based security practices
• Automation/scripting for security operations
• Familiarity with NIST, ISO, and CIS frameworks

Core Competencies

• Technical leadership and hands‑on problem solving
• Risk‑based decision making
• Collaboration across global teams
• Clear and effective communication

Values & Culture

• Acts with non‑negotiable integrity and maintains the highest professional standards.
• Demonstrates intellectual curiosity, seeking to continually advance the firm’s cybersecurity engineering posture.
• Embodies collaboration, transparency, and accountability in all engagements.
• Dedicated to protecting client trust through security excellence and proactive risk management.

Special Requirements

• Hybrid work model (4 days onsite preferred)
• Occasional after‑hours support for global operations