Identity Security Engineer – Entra ID & MFA

KBR Careers; Houston (TX); On-site; USD 70,000 - 95,000; Full time

Job summary

KBR is seeking an Associate Security Engineer to join our Identity Security Services team within a global cybersecurity organization. This permanent, full‑time role focuses on identity and access management across Entra ID, Active Directory, and hybrid identity solutions in complex enterprise environments.

The position emphasizes hands‑on security engineering, troubleshooting, governance, and collaboration with engineers and architects to strengthen identity security controls while supporting

Qualifications

• Bachelor's degree or equivalent education/experience.
• 2+ years in IT, cybersecurity, identity administration, systems administration, cloud support, service desk support, or a related technical field.
• U.S. citizenship required.

Responsibilities

• Support the administration and operation of Microsoft Entra ID, Active Directory, hybrid identity, and directory synchronization services.
• Perform identity administration activities for users, groups, devices, applications, service accounts, and access permissions.
• Troubleshoot authentication, authorization, provisioning, account lifecycle, and access-related issues.
• Review logs, alerts, and system data to identify and resolve identity-related incidents and operational problems.
• Support Conditional Access, MFA, passwordless authentication, and other modern access control solutions.
• Assist with privileged access management activities, including role assignments, access reviews, and least-privilege enforcement.
• Support identity governance processes, including access reviews, entitlement management, and joiner/mover/leaver activities.
• Assist with enterprise application integrations and identity federation technologies, including SAML, OAuth, OpenID Connect, and SCIM.
• Support application identities, service principals, managed identities, workload identities, and service accounts.
• Assist with Active Directory administration, Group Policy management, directory health monitoring, and hybrid identity operations.
• Support PKI and certificate lifecycle management activities, including certificate issuance, renewal, inventory, and trust relationships.
• Identify and help remediate identity-related risks, including excessive access, stale accounts, weak authentication, and unmanaged credentials.
• Support security monitoring, threat detection, and incident investigations using Microsoft security platforms and related tools.
• Gather technical evidence, perform root cause analysis, and assist with remediation activities during security and operational incidents.
• Participate in cloud deployments, application onboarding, tenant migrations, and other identity-related projects and initiatives.
• Support audit, compliance, and governance activities through evidence collection, documentation, and control validation.
• Create and maintain technical documentation, procedures, knowledge articles, and operational runbooks.
• Assist with reporting, automation, and continuous improvement efforts using PowerShell, Microsoft Graph, KQL, and related technologies.
• Follow established security, change management, incident management, and operational procedures.
• Collaborate with engineers, administrators, and stakeholders to improve identity security controls and operational effectiveness.
• Communicate technical issues, findings, and project updates clearly while continuing to develop identity security knowledge and expertise.

Skills

Troubleshooting

Communication

Collaboration

Attention to detail

Identity security

Learning agility

Education

Bachelor's degree in Cybersecurity or related field

Tools

PowerShell

Microsoft Graph

KQL

Job description

KBR is seeking an Associate Security Engineer to join our Identity Security Services team within a global cybersecurity organization. This permanent, full‑time role focuses on identity and access management across Entra ID, Active Directory, and hybrid identity solutions in complex enterprise environments.

The position emphasizes hands‑on security engineering, troubleshooting, governance, and collaboration with engineers and architects to strengthen identity security controls while supporting