Identity Security Engineer: Zero Trust & Windows Expert

ecsfederal; Washington (District of Columbia); Hybrid; USD 120,000 - 130,000; Full time

Job summary

Everforth ECS seeks an Identity Security Engineer to join our team in Washington, DC with optional remote work. The role focuses on designing and hardening identity systems, and aligning them with security operations and Zero Trust principles.

We require 5+ years of identity security and Windows server experience, with hands-on work on Entra ID/Azure AD, PIM, and secure provisioning. Strong collaboration across Cyber, Networking, and IT teams is essential.

Qualifications

• 5+ years of progressive experience in identity security and Windows server administration.
• Deep understanding of enterprise IAM architecture, governance and security operations.
• Experience integrating identity signals into security operations and logging.
• Hands-on with Microsoft Entra ID (Azure AD), PIM and just-in-time access controls.

Responsibilities

• Design, harden, and evolve identity systems, not just administer them.
• Lead initiatives to reduce identity-based risk across the organization.
• Ensure Windows server environment supporting identity systems is secured and documented.
• Collaborate with cybersecurity, networking, and IT teams to implement security controls.

Skills

Identity security

Windows Server

IAM architecture

Zero Trust

RBAC

Azure Entra ID

PIM

Just-in-time access

Tools

Active Directory

ADFS

Group Policy Objects

Microsoft Entra ID

Job description

Everforth ECS seeks an Identity Security Engineer to join our team in Washington, DC with optional remote work. The role focuses on designing and hardening identity systems, and aligning them with security operations and Zero Trust principles.

We require 5+ years of identity security and Windows server experience, with hands-on work on Entra ID/Azure AD, PIM, and secure provisioning. Strong collaboration across Cyber, Networking, and IT teams is essential.