Identity Security Engineer — Remote & Windows Identity Focus

ECS Corporate Services; Washington (District of Columbia); Hybrid; USD 120,000 - 130,000; Full time

Job summary

Everforth ECS is seeking an Identity Security Engineer to join our security operations division in Washington, DC, with a hybrid option for remote work. The role emphasizes designing, hardening, and evolving identity systems and Windows server infrastructure to meet high security standards.

The ideal candidate has 5+ years of identity security and Windows server experience, with hands-on knowledge of Azure AD/Entra, PIM, Zero Trust, RBAC, and secure provisioning practices.

Qualifications

• 5+ years of progressive identity security and Windows server administration.
• Engineering-focused identity security experience, not just operations.
• Knowledge of Zero Trust identity principles and modern authentication.

Responsibilities

• Design, harden, and evolve identity systems across the enterprise.
• Assess identity architecture against modern security frameworks and reduce identity risk.
• Lead initiatives to modernize authentication and access controls.
• Ensure Windows server environments supporting identity systems are secure and well-documented.
• Monitor identity health and respond to identity-based threats using analytics and runbooks.
• Collaborate with cybersecurity, networking, and IT teams and communicate risks to leadership.

Skills

IAM architecture

Security operations

Identity health monitoring

Azure Entra ID / Azure AD

PIM / just-in-time access

Zero Trust principles

RBAC & least privilege

Provisioning & deprovisioning

Windows Server administration

Active Directory / AD FS / GPOs

Security incident response

Security analytics & playbooks

Cross-team collaboration

Tools

Microsoft Entra ID (Azure AD)

Privileged Identity Management (PIM)

Federation Services (AD FS)

Job description

Everforth ECS is seeking an Identity Security Engineer to join our security operations division in Washington, DC, with a hybrid option for remote work. The role emphasizes designing, hardening, and evolving identity systems and Windows server infrastructure to meet high security standards.

The ideal candidate has 5+ years of identity security and Windows server experience, with hands-on knowledge of Azure AD/Entra, PIM, Zero Trust, RBAC, and secure provisioning practices.