Cybersecurity IAM Analyst

cbroextcx; Harrisburg (Dauphin County); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) match

Profit Sharing

Paid time off

Job summary

Cleveland Brothers is seeking a Cybersecurity IAM Analyst to design, implement, and maintain identity and access management controls onsite at Harrisburg or New Stanton. You will enforce least-privilege access, integrate IAM with enterprise apps and cloud services, and support lifecycle events from onboarding to offboarding.

The role includes PAM, Just-in-Time access, and security monitoring with the SOC. Ideal candidates have 3+ years in IAM/security roles, experience with AD/Entra ID, cloud

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field/equivalent practical experience.
• 3+ years in a cybersecurity engineering, IAM, identity, or access-focused security role.
• Experience in enterprise IT environments supporting identity, authentication, and access controls.
• Exposure to cloud or SaaS environments and their security considerations.

Responsibilities

• Design, implement, and maintain IAM solutions across the organization.
• Enforce least-privilege access through role-based and conditional controls.
• Integrate identity controls with enterprise apps and cloud services.
• Support user identity lifecycle processes including onboarding, changes, and offboarding.
• Conduct access reviews/recertification and remediate stale accounts.
• Administer PAM capabilities including credential vaulting and rotation.
• Implement just-in-time access and reduce standing privilege for admins.
• Harden AD/Entra ID/Azure AD including tiered admin practices.
• Collaborate with IT, Network and business teams to ensure secure access.
• Troubleshoot authentication and access issues.
• Participate in security architecture reviews for new systems.
• Maintain documentation and procedures related to identity security.
• Support audit, risk management, and compliance efforts.
• Continuously improve identity security controls to reduce risk.
• Investigate IAM security incidents and coordinate responses.
• Integrate identity telemetry into SIEM and support SOC alert tuning.

Skills

Identity and Access Management

Privileged Access Management

Active Directory / Entra ID

Cloud security

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

KnowBe4

CyberARK

CrowdStrike

Cisco Umbrella

Job description

Cleveland Brothers, the largest Cat® dealer in Pennsylvania, northern West Virginia and western Maryland, has an immediate opportunity for a Cybersecurity IAM Analyst onsite at our Harrisburg or New Stanton Branch.

Position Summary:

Designs and operates identity and cloud security controls that protect systems and data by enforcing secure, least privilege access across enterprise and cloud environments, enabling business operations while reducing identity based security risk.

Primary Responsibilities:

• Design, implement, and maintain Identity and Access Management (IAM) solutions across the organization.
• Enforce least‑privilege access through role‑based and conditional access controls.
• Integrate identity and access controls with enterprise applications and cloud‑based services.
• Support user identity lifecycle processes, including onboarding, access changes, and offboarding.
• Conduct regular access reviews/recertification and remediate orphaned, excessive, or stale accounts.
• Administer privileged access management (PAM) capabilities including credential vaulting, rotation, and session monitoring where applicable.
• Implement just‑in‑time access and reduce standing privilege for administrative roles when feasible.
• Administer and harden directory services (Active Directory and Entra ID/Azure AD), including tiered admin practices and authentication protocol hardening.
• Partner with IT, Network, and business teams to ensure secure and reliable system access.
• Troubleshoot and resolve authentication and access‑related issues.
• Participate in security architecture and design reviews for new systems and services.
• Maintain technical documentation, standards, and procedures related to identity security.
• Support audit, risk management, and compliance efforts.
• Continuously evaluate and improve identity security controls to reduce access‑related risk.
• Investigate IAM‑related security incidents (unauthorized access, credential compromise, privilege escalation) and coordinate response actions.
• Integrate identity telemetry (authentication and privilege logs) into SIEM platforms and support alert tuning with the SOC.
• Other duties as required.

Skills / Knowledge / Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field/equivalent practical experience
• Experience with Knowbe4, CyberARK, Crowdstrike, Cisco Umbrella, and patch management solutions a plus.

• 3+ years of experience in a cybersecurity engineering, IAM, identity, or access‑focused security role.
• Experience working in enterprise IT environments supporting identity, authentication, and access controls.
• Exposure to cloud or SaaS environments and their security considerations preferred.

Familiarity with security frameworks or compliance requirements (e.g., NIST, CMMC) is a plus.

• Availability for occasional after-hours support.
• Must pass background and reference checks consistent with company policy.

Why Join the Cleveland Brothers Team

• Market Leading Benefits Package: Medical, dental, vision, life insurance, 401(k) match, short- and long-term disability, health savings account, PTO, Profit Sharing Account.
• Advancement: Take your career to the next level with a dynamic organization that wants to see you succeed! In addition to room to grow in this role, there are limitless opportunities across 29 locations whether you want to move up, or into another division of the company.
• Stability – Cleveland Brothers has been around for 75 years. Experience tremendous job security in an essential role with an organization that is around for the long haul.

About Us:

For nearly 80 years, Cleveland Brothers Equipment Co., Inc. has proudly served as the exclusive Cat® dealer for western, central, and northeastern Pennsylvania, northern West Virginia, and western Maryland. Since 1948, we've built a legacy as a trusted partner in the construction, mining, forestry, and agricultural sectors.

From our 30 locations, we deliver comprehensive solutions, including high-quality new, used, and rental equipment, genuine parts, and expert service.

Beyond our extensive machinery offerings, we provide diverse solutions, such as industrial engines and generators all supported by our knowledgeable team of professionals.

At Cleveland Brothers, we're more than a dealer; we're your dedicated partner committed to helping you achieve your goals. Discover how we can support your operations at www.ClevelandBrothers.com.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.