Identity & Security Engineer Lead - Remote/Hybrid

Ledgent Technology; Houston (TX); Hybrid; USD 130,000 - 140,000; Full time

Job summary

Ledgent Technology seeks an Identity & Security Engineer to lead architecture, engineering, security, and monitoring of enterprise identity services across hybrid environments. The role emphasizes Active Directory, Entra ID, IAM, PAM, PKI, and cloud integrations.

Ideal candidates will excel in security engineering, modernization initiatives, and collaboration with cross-functional teams. Remote with onsite presence and full-time commitment.

Qualifications

• 8+ years supporting and engineering enterprise Active Directory environments.
• 5+ years with Microsoft Entra ID in hybrid environments.
• Deep expertise with AD DS, Entra ID, ADCS, and SSO technologies.
• Strong understanding of identity and access management principles, RBAC, and governance.
• Experience designing federation, SSO, and MFA solutions.
• Strong knowledge of authentication and authorization protocols including Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect (OIDC).

Responsibilities

• Design, implement, optimize, and maintain enterprise identity platforms including Active Directory Domain Services, Entra ID, Single Sign-On (SSO), and Multifactor Authentication (MFA).
• Architect secure identity frameworks utilizing RBAC, Conditional Access, least privilege, and Just-in-Time (JIT) access models.
• Develop identity governance programs and access lifecycle management processes.
• Lead the design and administration of identity services across hybrid cloud and on-premises environments.
• Establish governance and security controls for service accounts, application registrations, and other non-human identities.
• Integrate identity platforms with enterprise applications and business systems.
• Partner with security, compliance, infrastructure, application, and DevOps teams to implement secure identity practices.
• Lead PKI design, hardening initiatives, certificate lifecycle management, and authentication modernization efforts.
• Engineer and support privileged access management and secure vendor remote access solutions.
• Develop identity monitoring, auditing, and detection capabilities to identify suspicious or anomalous activity.
• Support identity threat detection and response using ITDR, EDR, and SIEM platforms.
• Perform root cause analysis and provide Tier 3 escalation support for complex authentication, authorization, and access-related issues.
• Implement security controls to protect enterprise infrastructure from unauthorized access and identity-based threats.
• Develop PowerShell automation, API integrations, and infrastructure-as-code solutions to reduce manual efforts.
• Support compliance initiatives through identity-focused controls, governance, auditing, and evidence collection.
• Lead identity-related projects through design, implementation, testing, deployment, and operational transition.
• Create and maintain technical documentation, standards, procedures, and runbooks.
• Evaluate emerging IAM and security technologies and recommend improvements to identity architecture and security posture.

Skills

Active Directory

Entra ID

IAM

Privileged Access Management

PKI

Identity governance

SAML

OAuth 2.0

OIDC

PowerShell scripting

Microsoft Graph API

Terraform

Python

Azure

Tools

Microsoft Graph API

Terraform

Python

AD CS

Azure

Job description

Ledgent Technology seeks an Identity & Security Engineer to lead architecture, engineering, security, and monitoring of enterprise identity services across hybrid environments. The role emphasizes Active Directory, Entra ID, IAM, PAM, PKI, and cloud integrations.

Ideal candidates will excel in security engineering, modernization initiatives, and collaboration with cross-functional teams. Remote with onsite presence and full-time commitment.