Identity & Access Security Engineer — Zero Trust Expert

Enfint; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Annual bonus

Long-term incentives

Competitive base salary

Job summary

Enfint is seeking an experienced IAM Security Engineer in the United States to design and operate identity controls across workforce, machine, and workload identities. You will implement continuous adaptive trust, strong MFA, SSO, and JIT access across multi-cloud environments.

The role demands hands-on IAM tooling with IdP/SSO (Okta, Entra ID, Ping), IGA (SailPoint, Saviynt), and PAM (CyberArk, BeyondTrust). Strong scripting skills and clear communication are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 5+ years hands-on experience in enterprise IAM or security engineering focused on identity, authentication, and access.
• Experience with IdP/SSO tools such as Okta, Entra ID/Azure AD, and Ping.
• Experience with IGA tools such as SailPoint and Saviynt.
• Experience with PAM tools such as CyberArk and BeyondTrust.
• Knowledge of SAML, OIDC, OAuth 2.0, SCIM, LDAP, and Kerberos.
• Basic knowledge of MITRE, NIST 800-63, and Zero Trust.
• Proficiency in Python, Bash, or PowerShell for automation.
• Ability to communicate technical findings clearly to stakeholders.

Responsibilities

• Implement and operate identity controls across workforce, machine, and workload identity domains.
• Operate continuous adaptive trust mechanisms, including continuous access evaluation, risk-based step-up authentication, and session revocation.
• Configure ZTNA, least-privilege access, phishing-resistant MFA/FIDO2, and JIT access.
• Implement SSO, federation, and authentication standards across SaaS and multi-cloud environments.
• Apply CIS Benchmarks and DISA STIGs to identity infrastructure with automated compliance validation.
• Build and maintain identity lifecycle automation integrating HR systems, directories, and downstream applications.
• Operate IGA workflows, including access reviews, certification campaigns, and segregation-of-duties checks.
• Administer PAM, including credential vaulting, JIT elevation, and session monitoring.
• Maintain governance of non-human identities using drift detection and policy-as-code.
• Feed identity telemetry into SIEM/SOAR and UEBA detection systems.
• Execute identity-focused incident response playbook steps for account takeover, credential compromise, and session hijacking.
• Implement identity checks in CI/CD pipelines, including secret scanning and IaC identity analysis.
• Act on AI-generated fix recommendations in pull request workflows.
• Track identity hygiene metrics and support audits, certifications, and e-discovery requirements alongside GRC.

Skills

Public Trust clearance

IAM/security engineering

Identity and access management

Python/Bash/PowerShell

Communication skills

Education

Bachelor's degree in Computer Science or related field

Master's degree preferred

Tools

Okta

Entra ID / Azure AD

Ping

SailPoint

Saviynt

CyberArk

BeyondTrust

Job description

Enfint is seeking an experienced IAM Security Engineer in the United States to design and operate identity controls across workforce, machine, and workload identities. You will implement continuous adaptive trust, strong MFA, SSO, and JIT access across multi-cloud environments.

The role demands hands-on IAM tooling with IdP/SSO (Okta, Entra ID, Ping), IGA (SailPoint, Saviynt), and PAM (CyberArk, BeyondTrust). Strong scripting skills and clear communication are essential.