IAM Security Engineer — Zero Trust & Detection

AirLife; Grand Rapids (MI); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k)

Paid time off

Paid holidays

Bereavement leave

Employee Assistance Program

Job summary

AirLife is seeking a Security Engineer focused on Identity, Access Management and Detection to design, implement, and operate IAM across our global environment. You will collaborate with Arctic Wolf to tune identity-based alerts and improve detection and response capabilities.

The role requires hands-on Entra ID and AD management, RBAC, SSO, MFA, and governance with a strong emphasis on Zero Trust and secure design principles. Travel up to 20% may be required.

Qualifications

• Deep IAM architecture knowledge including lifecycle management and governance.
• Experience with SSO, LDAP, and federation standards.
• Experience with RBAC and PAM/PIM controls.

Responsibilities

• Design, implement, and improve IAM architecture with automated provisioning workflows.
• Administer Entra ID and on-prem AD, including policy management and synchronization.
• Manage SSO and MFA platforms (Duo, Entra ID) for high availability and security.
• Develop and maintain PAM/PIM controls enforcing least-privilege access.

Skills

IAM architecture

IGA

PAM

PowerShell

Microsoft Entra ID

Active Directory

Duo MFA

Intune MDM

RBAC

Zero Trust

SIEM

MDR/MSSP

KnowBe4 awareness

Education

Bachelor's degree in Cybersecurity/IT/CS

IAM/security certification preferred

Tools

Rubrik/Azure

Microsoft Defender

Job description

AirLife is seeking a Security Engineer focused on Identity, Access Management and Detection to design, implement, and operate IAM across our global environment. You will collaborate with Arctic Wolf to tune identity-based alerts and improve detection and response capabilities.

The role requires hands-on Entra ID and AD management, RBAC, SSO, MFA, and governance with a strong emphasis on Zero Trust and secure design principles. Travel up to 20% may be required.