Identity and Security Engineer

Ledgent Technology; Houston (TX); Hybrid; USD 130,000 - 140,000; Full time

Job summary

Ledgent Technology seeks an Identity & Security Engineer to lead architecture, engineering, security, and monitoring of enterprise identity services across hybrid environments. The role emphasizes Active Directory, Entra ID, IAM, PAM, PKI, and cloud integrations.

Ideal candidates will excel in security engineering, modernization initiatives, and collaboration with cross-functional teams. Remote with onsite presence and full-time commitment.

Qualifications

• 8+ years supporting and engineering enterprise Active Directory environments.
• 5+ years with Microsoft Entra ID in hybrid environments.
• Deep expertise with AD DS, Entra ID, ADCS, and SSO technologies.
• Strong understanding of identity and access management principles, RBAC, and governance.
• Experience designing federation, SSO, and MFA solutions.
• Strong knowledge of authentication and authorization protocols including Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect (OIDC).

Responsibilities

• Design, implement, optimize, and maintain enterprise identity platforms including Active Directory Domain Services, Entra ID, Single Sign-On (SSO), and Multifactor Authentication (MFA).
• Architect secure identity frameworks utilizing RBAC, Conditional Access, least privilege, and Just-in-Time (JIT) access models.
• Develop identity governance programs and access lifecycle management processes.
• Lead the design and administration of identity services across hybrid cloud and on-premises environments.
• Establish governance and security controls for service accounts, application registrations, and other non-human identities.
• Integrate identity platforms with enterprise applications and business systems.
• Partner with security, compliance, infrastructure, application, and DevOps teams to implement secure identity practices.
• Lead PKI design, hardening initiatives, certificate lifecycle management, and authentication modernization efforts.
• Engineer and support privileged access management and secure vendor remote access solutions.
• Develop identity monitoring, auditing, and detection capabilities to identify suspicious or anomalous activity.
• Support identity threat detection and response using ITDR, EDR, and SIEM platforms.
• Perform root cause analysis and provide Tier 3 escalation support for complex authentication, authorization, and access-related issues.
• Implement security controls to protect enterprise infrastructure from unauthorized access and identity-based threats.
• Develop PowerShell automation, API integrations, and infrastructure-as-code solutions to reduce manual efforts.
• Support compliance initiatives through identity-focused controls, governance, auditing, and evidence collection.
• Lead identity-related projects through design, implementation, testing, deployment, and operational transition.
• Create and maintain technical documentation, standards, procedures, and runbooks.
• Evaluate emerging IAM and security technologies and recommend improvements to identity architecture and security posture.

Skills

Active Directory

Entra ID

IAM

Privileged Access Management

PKI

Identity governance

SAML

OAuth 2.0

OIDC

PowerShell scripting

Microsoft Graph API

Terraform

Python

Azure

Tools

Microsoft Graph API

Terraform

Python

AD CS

Azure

Job description

Location: Atlanta, Austin, Houston, Dallas, Miramar, Orlando, Tallahassee, West Palm Beach, Fort Lauderdale, Phoenix, Las Vegas or Charlotte

Schedule: Remote - Some onsite/local presence is needed

Employment Type: Full-Time

Compensation: $130-140k

No C2C at this time

Overview

Our client is seeking an Identity & Security Engineer to serve as a lead technical resource responsible for the architecture, engineering, security, and monitoring of enterprise identity services across hybrid environments. This role will focus heavily on Active Directory, Entra ID, Identity and Access Management (IAM), Privileged Access Management (PAM), PKI, identity governance, and cloud identity integrations. The ideal candidate will have deep expertise in Microsoft identity technologies, strong security engineering capabilities, and experience driving modernization initiatives across both on-premises and cloud environments.

Responsibilities

Design, implement, optimize, and maintain enterprise identity platforms including Active Directory Domain Services, Entra ID, Single Sign-On (SSO), and Multifactor Authentication (MFA).

Architect secure identity frameworks utilizing RBAC, Conditional Access, least privilege, and Just-in-Time (JIT) access models.

Develop identity governance programs and access lifecycle management processes.

Lead the design and administration of identity services across hybrid cloud and on-premises environments.

Establish governance and security controls for service accounts, application registrations, and other non-human identities.

Integrate identity platforms with enterprise applications and business systems.

Partner with security, compliance, infrastructure, application, and DevOps teams to implement secure identity practices.

Lead PKI design, hardening initiatives, certificate lifecycle management, and authentication modernization efforts.

Engineer and support privileged access management and secure vendor remote access solutions.

Develop identity monitoring, auditing, and detection capabilities to identify suspicious or anomalous activity.

Support identity threat detection and response using ITDR, EDR, and SIEM platforms.

Perform root cause analysis and provide Tier 3 escalation support for complex authentication, authorization, and access-related issues.

Implement security controls to protect enterprise infrastructure from unauthorized access and identity-based threats.

Develop PowerShell automation, API integrations, and infrastructure-as-code solutions to reduce manual efforts.

Support compliance initiatives through identity-focused controls, governance, auditing, and evidence collection.

Lead identity-related projects through design, implementation, testing, deployment, and operational transition.

Create and maintain technical documentation, standards, procedures, and runbooks.

Evaluate emerging IAM and security technologies and recommend improvements to identity architecture and security posture.

Requirements

8+ years of experience supporting and engineering enterprise Active Directory environments.

5+ years of hands-on experience with Microsoft Entra ID in hybrid environments.

Deep expertise with Active Directory Domain Services (AD DS), Entra ID, ADCS, and Single Sign-On technologies.

Strong understanding of identity and access management principles, role-based access controls, and identity governance.

Experience designing and supporting federation, SSO, and MFA solutions.

Strong knowledge of authentication and authorization protocols including Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect (OIDC).

Hands-on experience with Public Key Infrastructure (PKI), AD Certificate Services, and certificate lifecycle management.

Experience with Privileged Access Management (PAM) platforms and privileged access controls.

Advanced PowerShell scripting and automation experience.

Experience with Microsoft Graph API, Python, Terraform, or similar automation technologies.

Strong understanding of Zero Trust security concepts and identity protection strategies.

Experience with Microsoft Defender for Identity, Entra ID Protection, Microsoft Defender XDR, or similar security platforms.

Strong troubleshooting, analytical, and problem-solving skills.

Excellent communication skills with the ability to work across technical and non-technical teams.

Ability to work independently, lead initiatives, and serve as a senior technical resource.

Ability to participate in an on-call rotation and support critical production systems.

Preferred Experience

Experience with Okta, Ping Identity, or other enterprise IAM platforms.

Microsoft Entra Suite architecture and administration experience.

Certificate-based authentication modernization initiatives.

AWS and/or GCP cloud experience.

Microsoft certifications such as Azure Security Engineer Associate or Identity and Access Administrator Associate.

CISSP or other cybersecurity certifications.

Experience supporting large enterprise, professional services, legal, or highly regulated environments.

Experience with identity threat detection and response (ITDR) programs and identity-focused security operations.

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.