Identity & Directory Security Engineer (AD/Entra ID)

CBRE; United States; Hybrid; USD 110,000 - 160,000; Full time

Job summary

CBRE is seeking a Cybersecurity Engineer to secure and support global AD and Entra ID in a hybrid environment. You will enhance authentication, automation, and monitoring across on-premises and cloud estates to ensure directory services integrity and availability.

You will lead projects, develop automated monitoring solutions, provide L3 support, and collaborate with IT and security teams worldwide. Strong scripting (PowerShell, Python) and experience with IAM controls are essential.

Qualifications

• Bachelor's Degree preferred with 5-8 years of relevant experience in directory services (AD, Entra ID).
• Strong understanding of AD and Entra ID architecture, permissions, and security best practices.
• Experience with authentication protocols (Kerberos, SAML, OAuth).
• Proficient in scripting and automation; PowerShell or Python preferred.

Responsibilities

• Architect, implement, and maintain secure directory systems (AD and Entra ID) on-premises and in the cloud.
• Serve as SME for authentication and directory-based authorization.
• Investigate and resolve security vulnerabilities in directory components.
• Lead and contribute to global projects enabling directory services.

Skills

Scripting & automation

Authentication protocols

Troubleshooting & documentation

Global collaboration

Education

Bachelor's degree preferred

Tools

PowerShell

Python

Entra ID/Azure AD

Active Directory

SIEM

Job description

CBRE is seeking a Cybersecurity Engineer to secure and support global AD and Entra ID in a hybrid environment. You will enhance authentication, automation, and monitoring across on-premises and cloud estates to ensure directory services integrity and availability.

You will lead projects, develop automated monitoring solutions, provide L3 support, and collaborate with IT and security teams worldwide. Strong scripting (PowerShell, Python) and experience with IAM controls are essential.