Identity & Access Security Engineer - IAM/PAM Specialist

Brown Advisory; Baltimore (MD); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Job summary

Brown Advisory is seeking an Identity and Access Security Engineer to lead and mature the firm's identity security controls across Okta, Entra ID, Active Directory, CyberArk, and related technologies. This hands‑on security role focuses on reducing identity‑related risk across workforce, service, and machine identities.

You will partner with Infrastructure, Compliance, HR, and Operations to enable secure SaaS, cloud, and on‑premises adoption while maintaining strong access governance and

Qualifications

• Experience securing identity platforms in enterprise environments.
• Strong knowledge of IAM concepts and privileged access controls.
• Ability to translate security findings into actionable remediation plans.

Responsibilities

• Own day‑to‑day identity governance and engineering across IAM, PAM, MFA, and access reviews.
• Design and operate privileged‑access controls using CyberArk, including onboarding and rotation.
• Manage lifecycle of privileged and service identities and review privileged accounts regularly.
• Identify unmanaged or misconfigured identities and coordinate onboarding or retirement as needed.
• Develop CyberArk safes, policies, and recovery documentation to ensure strong controls.
• Lead identity threat exposure management and remediation through BloodHound findings.

Skills

Identity security engineering

Governance

Threat exposure management

Security collaboration

Education

Bachelor's degree in Cybersecurity

Tools

Okta

Microsoft Entra ID

Active Directory

CyberArk

BloodHound Enterprise

Job description

Brown Advisory is seeking an Identity and Access Security Engineer to lead and mature the firm's identity security controls across Okta, Entra ID, Active Directory, CyberArk, and related technologies. This hands‑on security role focuses on reducing identity‑related risk across workforce, service, and machine identities.

You will partner with Infrastructure, Compliance, HR, and Operations to enable secure SaaS, cloud, and on‑premises adoption while maintaining strong access governance and