Identity Security Engineer — IAM/PAM, ZSP & JIT

CDW; Cary (NC); Hybrid; USD 110,000 - 160,000; Full time

Job summary

CDW in Cary, NC is seeking an Identity Security Engineer for a 6-month contract to hire in a hybrid on-site role. You will strengthen identity security, reduce privileged access risk, and enable secure access across enterprise systems, data, and cloud resources.

You will engineer and support IAM and PAM solutions across cloud, on-prem, and hybrid environments, with a focus on ZSP, JIT, least privilege, RBAC, Conditional Access, and modern authentication.

Qualifications

• Bachelor’s degree or equivalent experience in a cybersecurity-related field.
• 3+ years of experience designing, implementing, or supporting IAM, PAM, or enterprise identity security solutions.
• 2+ years of hands-on PAM experience with CyberArk Privilege Cloud, CyberArk PAM, Delinea, BeyondTrust, or a comparable platform.

Responsibilities

• Design, implement, and support IAM and PAM solutions across cloud, on-premises, and hybrid environments.
• Engineer privileged access capabilities including credential vaulting, password rotation, session management, and lifecycle management.
• Advance ZSP, JIT access, least privilege, RBAC, and privileged access reduction initiatives.
• Implement and support Microsoft Entra ID, including Conditional Access, PIM, MFA, Identity Protection, passwordless authentication, and access controls.
• Support application access, SSO, federation, and authentication integrations using SAML, OAuth 2.0, OIDC, LDAP, Active Directory, and directory services.
• Secure privileged users, administrative and service accounts, application identities, machine identities, and other non-human identities.
• Onboard applications, servers, databases, endpoints, and cloud resources into PAM and identity security platforms.
• Develop privileged access standards, engineering runbooks, operational procedures, and Zero Trust access patterns.
• Automate identity and privileged access processes using PowerShell, Python, REST APIs, and workflow integrations.
• Troubleshoot IAM/PAM issues, perform root cause analysis, and remediate identity-related security risks and control gaps.
• Partner with security, infrastructure, cloud, application, and business teams on identity security initiatives.

Skills

IAM

PAM

Zero Standing Privilege

Just-In-Time access

least privilege

RBAC

Conditional Access

MFA

SSO

Active Directory

PowerShell

Python

REST APIs

Education

Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field

Tools

CyberArk Privilege Cloud

CyberArk PAM

Delinea

BeyondTrust

Job description

CDW in Cary, NC is seeking an Identity Security Engineer for a 6-month contract to hire in a hybrid on-site role. You will strengthen identity security, reduce privileged access risk, and enable secure access across enterprise systems, data, and cloud resources.

You will engineer and support IAM and PAM solutions across cloud, on-prem, and hybrid environments, with a focus on ZSP, JIT, least privilege, RBAC, Conditional Access, and modern authentication.