Hybrid Identity Security Engineer - PAM & IAM

Janus Henderson Investors; Denver (CO); Hybrid; USD 90,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

Health & Wellbeing benefits

Paid volunteer time

Professional development support

Parental leave

Employee events

Complimentary beverages and snacks

Job summary

Janus Henderson Investors is seeking an Identity Security Engineer to design, implement, and operate privileged access management (PAM) controls across on-prem and cloud environments. This role will secure privileged users, service accounts, machine identities, APIs, and AI agents throughout their lifecycles.

You will lead identity threat detection, investigate identity events, and develop automation and governance metrics to strengthen security posture and reduce risk, with strong collaboration

Qualifications

• Strong understanding of Privileged Access Management (PAM) principles and related concepts.
• Ability to investigate, triage, and resolve PAM and identity-related incidents and issues.
• Experience administering and engineering enterprise PAM platforms such as Britive, CyberArk, Delinea or equivalent.
• Experience designing, implementing and operating privileged access controls across on-prem and cloud environments.
• Experience onboarding and governing privileged users, service accounts, machine identities, APIs, workload identities and other non-human identities.
• Experience securing privileged access for automation platforms, cloud workloads, DevOps tooling, and AI agents.
• Experience configuring identity security and data access governance platforms (Active Directory/Entra ID auditing, permissions analysis, access monitoring, reporting).
• Strong understanding of IAG concepts and integrations with PAM, ITSM platforms like SailPoint ISC and ServiceNow.

Responsibilities

• Design, implement and operate PAM controls across on-prem and cloud environments.
• Secure lifecycle for privileged users, service accounts, machine identities, APIs and other non-human identities.
• Support identity threat detection and response capabilities and investigate identity-related security events.
• Develop security metrics and automation to strengthen identity security posture and reduce operational risk.
• Collaborate with ITSM and identity governance tooling for provisioning workflows and lifecycle management.

Skills

PAM principles

Incident triage

PAM platforms

Privileged access design

Non-human identities

Automation & cloud

AD/Entra auditing

IAG integration

Identity lifecycle

AD/Entra ID

Security metrics

Tools

Britive

CyberArk

Delinea

Job description

Janus Henderson Investors is seeking an Identity Security Engineer to design, implement, and operate privileged access management (PAM) controls across on-prem and cloud environments. This role will secure privileged users, service accounts, machine identities, APIs, and AI agents throughout their lifecycles.

You will lead identity threat detection, investigate identity events, and develop automation and governance metrics to strengthen security posture and reduce risk, with strong collaboration