Identity Security Engineer - Zero Trust & Windows

ECS

Washington (District of Columbia)

Hybrid

USD 120,000 - 130,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Everforth ECS in Washington, DC/remote is seeking an Identity Security Engineer to join our security operations division. The role focuses on designing and evolving identity systems, with emphasis on Windows Server infrastructure and zero-trust posture.

You will operate in a hybrid model with emphasis on secure, engineering-level work. The position requires 5+ years in identity security and Windows server administration, with preferred hands-on Zero Trust experience and strong collaboration

Qualifications

5+ years of progressive experience in identity security and Windows server administration.
Experience with IAM architecture, governance, and security operations.
Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats.
Hands-on with Entra ID/Azure AD, PIM, and just-in-time access controls.
Experience enforcing least privilege, RBAC, and automated provisioning/deprovisioning.

Responsibilities

Design, harden, and evolve identity systems as part of a security engineering team.
Assess identity architecture against modern security frameworks and drive improvements.
Lead initiatives to reduce identity-based risk and mature identity posture.
Ensure Windows Server environments are configured, documented, and defended.
Collaborate across cybersecurity, networking, and systems teams; communicate risks clearly.