Identity & Access Security Engineer — Zero Trust Detection

Airlife; Town of Grand Rapids (WI); On-site; USD 95,000 - 105,000; Full time

Job summary

AirLife is seeking a Security Engineer – Identity, Access Management & Detection to design, implement, and operate our IAM infrastructure across a global environment. You will manage identities, authentication, and privileged access, while coordinating with Arctic Wolf to detect and remediate identity-based threats.

This role supports Zero Trust adoption, RBAC, SSO, and audit readiness, partnering with MDR/MSSP teams to tune alerts and ensure compliance with NIST and ISO 27001 frameworks.

Qualifications

• Design, implement, and optimize IAM architecture across global environment.
• Manage identity governance and PAM controls with least-privilege principles.
• Coordinate with MDR/MSSP providers on alert tuning and threat response.
• Ensure compliance with NIST ISO 27001 CIS/GDPR in IAM design.

Responsibilities

• Design, implement, and continuously improve IAM architecture and workflows.
• Administer Entra ID and on-prem AD, including GPOs and directory sync.
• Manage SSO and MFA platforms for high availability and security.
• Develop PAM/PIM controls for privileged accounts.
• Perform access reviews and audit evidence for compliance.

Skills

IAM architecture

Microsoft Entra ID

Active Directory

PowerShell

Duo MFA

RBAC

SSO

LDAP

SIEM

MDR/MSSP collaboration

Zero Trust

Vulnerability management

Backup/DR

Compliance frameworks

KnowBe4 security awareness

Security certifications

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Rubrik

Azure

Arctic Wolf

Microsoft Defender

Microsoft Intune

Duo MFA

Job description

AirLife is seeking a Security Engineer – Identity, Access Management & Detection to design, implement, and operate our IAM infrastructure across a global environment. You will manage identities, authentication, and privileged access, while coordinating with Arctic Wolf to detect and remediate identity-based threats.

This role supports Zero Trust adoption, RBAC, SSO, and audit readiness, partnering with MDR/MSSP teams to tune alerts and ensure compliance with NIST and ISO 27001 frameworks.