Identity Security Engineer: IAM & PAM, Zero Trust

Eliassen Group

Cary (NC)

Hybrid

USD 111,000 - 116,000

Full time

4 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Eliassen Group is seeking an Identity Security Engineer in Cary, NC to strengthen identity security across cloud, on-premises, and hybrid environments. You will design and support IAM and PAM solutions, advance Zero Trust through ZSP and JIT access, and work with cross-functional teams to enable secure access to systems and cloud resources.

The role requires 3+ years of IAM/PAM experience, CyberArk/Delinea/BeyondTrust familiarity, and strong Entra ID capabilities.

Qualifications

3+ years designing, implementing, and supporting IAM, PAM, and identity security solutions in large enterprise environments.
2+ years hands-on administration with CyberArk Privilege Cloud, CyberArk PAM, Delinea, BeyondTrust or comparable PAM platforms.
Strong knowledge of Microsoft Entra ID, Conditional Access, MFA, Identity Protection, and modern authentication controls.

Responsibilities

Design, implement, and support enterprise IAM and PAM solutions across cloud, on-premises, and hybrid environments.
Engineer privileged access capabilities including credential vaulting, password rotation, session management, and break-glass access.
Advance Zero Standing Privilege and Just-In-Time access, RBAC initiatives, and least privilege.
Implement and support Microsoft Entra ID capabilities including Conditional Access, PIM, MFA, and access security controls.
Collaborate with cross-functional teams to onboard systems and cloud resources into PAM and identity security platforms.
Automate identity and privileged access processes using PowerShell, Python, REST APIs, and workflow orchestration.