Identity Security Engineer: Zero Trust, PAM & JIT Access

American Tower; Boston (MA); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Healthcare coverage

401(k) plan

Paid time off

Holidays

Parental leave

Employee Assistance Program

Job summary

American Tower is seeking an Identity Security Engineer to strengthen identity security across cloud, on-prem, and hybrid environments. You will implement and support IAM and PAM solutions, advance Zero Trust concepts, and work with cross-functional teams including Security Operations and Cloud.

The role requires designing, deploying, and maintaining identity security controls, RBAC, and modern auth technologies, with a focus on Privileged Access management and secure access to enterprise

Qualifications

• Bachelor’s degree in a related field or equivalent experience.
• 3+ years designing, implementing IAM/PAM in large enterprises.
• 2+ years hands-on with PAM platforms (CyberArk, Delinea, BeyondTrust).
• Ability to advance ZSP, JIT, least privilege, RBAC, and break-glass access.

Responsibilities

• Design and implement IAM and PAM across cloud, on-premises, and hybrid environments.
• Develop privileged access controls, credential vaulting, rotation, and session management.
• Advance Zero Trust concepts including ZSP, JIT, and RBAC improvements.
• Support integration of Entra ID, MFA, PIM, and modern authentication controls.
• Collaborate with cross-functional teams to onboard systems to PAM/identity platforms.

Skills

IAM / PAM

ZSP / JIT access

RBAC / break-glass

Microsoft Entra ID

MFA / Identity Protection

SSO / SAML / OAuth

PowerShell / Python

REST APIs / automation

Threat & risk assessment

Education

Bachelor’s degree in Cybersecurity, IT, CS or engineering

Tools

CyberArk Privilege Cloud

CyberArk PAM

Delinea

BeyondTrust

Job description

American Tower is seeking an Identity Security Engineer to strengthen identity security across cloud, on-prem, and hybrid environments. You will implement and support IAM and PAM solutions, advance Zero Trust concepts, and work with cross-functional teams including Security Operations and Cloud.

The role requires designing, deploying, and maintaining identity security controls, RBAC, and modern auth technologies, with a focus on Privileged Access management and secure access to enterprise