IAM Security Analyst — SSO, PAM & Threat Detection

EMCOR Group; Phoenix, Las Vegas (AZ, NV); On-site; USD 97,000 - 107,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Health Savings Account

Flexible Spending Accounts

Life insurance

Disability insurance

401(k) Savings Plan

College Coach

Employee assistance program

Job summary

EMCOR Group, Inc. is seeking a Security Analyst – Identity and Access Management (IAM) to support the Security Program by administering identity systems, including SSO, PAM, and user lifecycle management.

The role emphasizes Microsoft Sentinel and Defender, using KQL to enhance threat detection and automate responses in SOC operations. The ideal candidate will have extensive AD/Entra ID experience, strong PowerShell skills, and a track record of improving IAM maturity.

Qualifications

• Five+ years of experience with Microsoft Active Directory, preferably in a multi-domain environment.
• At least three years with Microsoft Entra ID.
• Two+ years with Microsoft Defender Platform and/or Microsoft Sentinel.
• At least one year with Privileged Access Management systems.
• Proficient in using PowerShell for administration and automation.
• Experience with MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.

Responsibilities

• Provide subject-matter expertise during security incidents and document findings.
• Design, implement, and maintain Microsoft Sentinel and Defender monitoring with custom KQL queries.
• Monitor emerging threats and advise on responses to stakeholders.
• Investigate and resolve IAM security incidents using established tools and procedures.
• Support and monitor the enterprise information security system as directed by management.
• Manage daily IAM operations and incident/ticket resolution.
• Administer Entra ID with SSO, Conditional Access, and modern authentication.
• Deploy and maintain IAM systems for user lifecycle, access governance, and PAM.
• Collaborate with security and IT teams to mature IAM processes.
• Maintain and upgrade servers and applications supporting security tools.
• Perform special projects as needed.

Skills

Active Directory

Entra ID

Microsoft Defender/Sentinel

Privileged Access Management

PowerShell

SSO

MFA

KQL

Tools

Microsoft Defender/ Sentinel

KQL

Entra ID

Job description

EMCOR Group, Inc. is seeking a Security Analyst – Identity and Access Management (IAM) to support the Security Program by administering identity systems, including SSO, PAM, and user lifecycle management.

The role emphasizes Microsoft Sentinel and Defender, using KQL to enhance threat detection and automate responses in SOC operations. The ideal candidate will have extensive AD/Entra ID experience, strong PowerShell skills, and a track record of improving IAM maturity.