Privileged Access & Identity Security Engineer

Janus Henderson Group; Denver, Northern (CO, KY); Hybrid; USD 90,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

Wellbeing benefits

Volunteer time

Professional development & tuition/re-

Parental leave

Employee events & social activities

Bev erages & snacks

Job summary

Janus Henderson Investors is hiring an Identity Security Engineer to secure privileged access and identities across PAM controls, both on‑prem and in the cloud. The role focuses on lifecycle management for users, service accounts, machine identities, APIs, and AI agents, while also supporting identity threat detection and governance tooling.

You will design and operate PAM controls, drive automation, and contribute to security metrics.

Qualifications

• Must have PAM expertise including least privilege and just‑in‑time access.
• Experience with enterprise PAM platforms such as Britive, CyberArk, Delinea.
• Experience designing, implementing, and operating privileged access controls across on‑premise and cloud environments.
• Experience onboarding and governing privileged users, service accounts, machine identities, APIs, workload identities, and other non‑human identities.
• Experience securing and managing privileged access for automation platforms, cloud workloads, DevOps tooling, and emerging AI agents.
• Experience configuring and maintaining identity security and data access governance platforms, including Active Directory/Entra ID auditing, permissions analysis, access monitoring, and security reporting.
• Strong understanding of Identity Access Governance (IAG) concepts and integrations with SailPoint ICS and ServiceNow.
• Experience with AD/Entra ID federation, authentication, access control, and modern identity security architectures.
• Experience developing security metrics, KPIs, dashboards, and reporting to measure control effectiveness and risk reduction.

Responsibilities

• Design, implement, and operate PAM controls across environments.
• Secure privileged access across lifecycle for users, service accounts, and machine identities.
• Support identity threat detection and incident response capabilities.
• Maintain data access governance tooling and security reporting.
• Develop security metrics and automation to strengthen identity security posture.
• Collaborate with IT, security, and DevOps teams to improve control effectiveness.

Skills

PAM concepts

Incident investigation

Enterprise PAM platforms

Privileged access controls

Non-human identities

Automation & AI security

Identity governance

IAG integrations

AD/Entra ID

Security metrics & dashboards

Tools

Britive

CyberArk

Delinea

SailPoint ISC

ServiceNow

Active Directory

Entra ID

PowerShell

Python

Job description

Janus Henderson Investors is hiring an Identity Security Engineer to secure privileged access and identities across PAM controls, both on‑prem and in the cloud. The role focuses on lifecycle management for users, service accounts, machine identities, APIs, and AI agents, while also supporting identity threat detection and governance tooling.

You will design and operate PAM controls, drive automation, and contribute to security metrics.