Privileged Access & Identity Security Engineer

ApplyMint; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Sporty Group seeks an Identity PAM Security Engineer to design and operate identity security controls across enterprise systems. You will focus on privileged access management, service account security, and conditional access, collaborating with Security, Infrastructure, and Engineering teams.

Responsibilities include managing PIM/JIT access, access reviews, and credential rotation, while implementing automation and governance to uphold least privilege in cloud and on-prem environments.

Qualifications

• 4+ years in Identity and Access Management, Cloud Security, or Security Engineering.
• Hands-on experience administering Microsoft Entra ID and Google Cloud IAM.
• Strong understanding of least privilege, RBAC, MFA, conditional access, and privileged access management.
• Experience managing service accounts, machine identities, secrets, and credential rotation.
• Experience building automation using PowerShell, Python, or similar.
• Strong analytical and problem-solving skills with a security-first mindset.
• Excellent documentation, communication, and stakeholder management skills.
• Ability to work effectively in a fast-paced, distributed environment.

Responsibilities

• Manage privileged access controls including PIM, JIT access, approval workflows, and privileged role assignments.
• Define and maintain administrative access processes for high-risk roles, privileged sessions, and break-glass accounts.
• Lead and support access review processes, track remediation activities, and ensure access rights align with least-privilege principles.
• Manage the lifecycle of service and machine accounts, including ownership, permissions, credential rotation, monitoring, and decommissioning.
• Configure, maintain, and monitor conditional access policies, MFA, and identity risk controls.
• Design and implement automation for identity workflows, approvals, access validation, reporting, and remediation activities.
• Collaborate with Security, Infrastructure, and Engineering teams to strengthen identity security across cloud and enterprise environments.
• Support security audits, incident response activities, and identity-related investigations.
• Contribute to ongoing improvement of identity governance and security operations practices.

Skills

IAM

Cloud Security

RBAC

MFA

PIM

Automation

PowerShell

Python

Documentation

Tools

Microsoft Entra ID

Google Cloud IAM

Job description

Sporty Group seeks an Identity PAM Security Engineer to design and operate identity security controls across enterprise systems. You will focus on privileged access management, service account security, and conditional access, collaborating with Security, Infrastructure, and Engineering teams.

Responsibilities include managing PIM/JIT access, access reviews, and credential rotation, while implementing automation and governance to uphold least privilege in cloud and on-prem environments.