Identity & Access Security Engineer - Privileged Access

Jobtailor; Baltimore (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor seeks an IAM security professional to govern identity controls across Okta, Entra ID, and Active Directory. You will manage privileged access, implement MFA/SSO, and lead remediation of exposure gaps in regulated environments.

You will work with Infrastructure and Security teams to improve identity lifecycle workflows, perform access reviews, and contribute to evidence collection and policy reporting.

Qualifications

• Bachelor's degree or equivalent professional experience in cybersecurity, CS, info systems, engineering, or related field.
• 4–8 years of information security, identity and access management, or related work.
• Hands-on with identity controls in Microsoft Entra ID and Active Directory.
• Experience with Okta or another enterprise identity provider preferred.
• Hands-on with privileged-access management platforms; CyberArk preferred.
• Experience with BloodHound Enterprise or similar for attack-path analysis.
• Knowledge of identity governance, access certification, and role governance.
• Strong communication skills and cross-team collaboration.
• Authorized to work in the United States without current or future sponsorship.

Responsibilities

• Own day-to-day security governance and engineering of identity controls across Okta, Entra ID, AD, MFA, Conditional Access, privileged access, and identity lifecycle.
• Design, implement, operate, and improve CyberArk privileged-access controls, including onboarding, rotation, and evidence collection.
• Govern privileged human and non-human identities across admin, service, and machine accounts.
• Identify unmanaged or noncompliant accounts and coordinate remediation or retirement.
• Develop and maintain CyberArk safes, policies, and recovery documentation.
• Operate BloodHound Enterprise to analyze attack paths and privilege relationships.
• Translate findings into prioritized remediation plans and validate via rescans and evidence.

Skills

Identity Governance

Privileged Access Management

Microsoft Entra ID Administration

BloodHound Enterprise Analysis

Access Reviews and Remediation

PowerShell Scripting

REST API Automation

Credential Rotation

Active Directory Security

MFA / SSO Implementation

Education

Bachelor's degree in cybersecurity, computer science, information systems, engineering, or equivalent

Tools

Okta

Microsoft Entra ID

Active Directory

CyberArk

BloodHound Enterprise

SIEM

Microsoft 365

OAuth 2.0

SAML

SCIM

Job description

Jobtailor seeks an IAM security professional to govern identity controls across Okta, Entra ID, and Active Directory. You will manage privileged access, implement MFA/SSO, and lead remediation of exposure gaps in regulated environments.

You will work with Infrastructure and Security teams to improve identity lifecycle workflows, perform access reviews, and contribute to evidence collection and policy reporting.