Remote - IAM Engineer

Beacon Hill; Phoenix (AZ); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Paid leave programs

Job summary

Beacon Hill is seeking a Senior Authentication / Identity Security Engineer to design, implement, and enhance enterprise authentication platforms. You will own Microsoft Entra ID and Active Directory environments, secure AI and non-human identities, and lead cross-functional engineering initiatives.

A deep understanding of authentication protocols and security architecture is required, with a track record of technical leadership.

Qualifications

• 6+ years of hands-on experience in IAM, authentication engineering, identity security, or related security engineering.
• Strong experience with Microsoft Entra ID (Azure AD) in enterprise environments.
• Deep expertise in Active Directory, authentication security, and hybrid identity.
• Experience securing AI identities, agents, or automated workloads.
• Experience managing service accounts, service principals, or workload identities.
• Solid understanding of authentication protocols, federation, access controls, and security best practices.
• Experience designing and supporting scalable enterprise identity platforms.
• Ability to lead engineers, set technical standards, and collaborate across teams.
• Strong troubleshooting and communication skills.

Responsibilities

• Design, implement, and enhance enterprise authentication and identity security solutions.
• Engineer and support Microsoft Entra ID and Active Directory environments.
• Support AI Identity Management and Non-Human Identity security initiatives.
• Lead authentication-related projects, including password security and NHI observability.
• Establish engineering standards and improve platform security, performance, scalability, and reliability.
• Provide technical leadership and mentorship to other engineers.
• Collaborate with security, infrastructure, and engineering teams on identity architecture and platform improvements.

Skills

Identity & Access Management

Microsoft Entra ID (Azure AD)

Active Directory

AI Identity Management

Non-Human Identity (NHI)

Authentication Engineering

Security Architecture

Technical Leadership

Troubleshooting & problem-solving

Communication skills

Education

Bachelor's degree

Tools

AWS IAM Identity Center (AWS SSO)

SailPoint Identity Security Cloud (ISC)

Job description

NOTE: This is a 100% remote position. Candidates will be working on Arizona Timezone.

Senior Authentication / Identity Security Engineer

Position Overview

Seeking a Senior Authentication / Identity Security Engineer to design, implement, and enhance enterprise authentication and identity security platforms. This role requires deep expertise in Microsoft Entra ID, Active Directory, and AI Identity Management, with a focus on secure authentication, non-human identities (NHI), scalability, and platform reliability.

Must-Have Qualifications

• 6+ years of hands-on experience in IAM, authentication engineering, identity security, or related security engineering.
• Microsoft Entra ID (Azure AD) - Strong hands-on experience with enterprise authentication, identity security, and platform engineering.
• Active Directory - Deep expertise in AD administration, authentication, security, and hybrid identity environments.
• AI Identity Management - Experience securing and managing AI-related identities, agents, or automated workloads.
• Non-Human Identity (NHI) - Experience managing or securing service accounts, service principals, managed identities, or workload identities.
• Authentication Engineering - Strong understanding of authentication protocols, identity federation, access controls, and security best practices.
• Security Architecture & Engineering - Experience designing, implementing, and supporting secure, scalable enterprise identity platforms.
• Technical Leadership - Ability to lead complex engineering initiatives, establish technical standards, mentor engineers, and collaborate across teams.
• Strong troubleshooting, problem-solving, and communication skills.

Preferred Qualifications

• AWS IAM Identity Center (AWS SSO).
• SailPoint Identity Security Cloud (ISC).
• Experience owning enterprise identity platforms or leading major security initiatives.
• Cloud security, identity, or automation certifications.

Key Responsibilities

• Design, implement, and enhance enterprise authentication and identity security solutions.
• Engineer and support Microsoft Entra ID and Active Directory environments.
• Support AI Identity Management and Non-Human Identity (NHI) security initiatives.
• Lead authentication-related projects, including password security and NHI observability.
• Establish engineering standards and improve platform security, performance, scalability, and reliability.
• Provide technical leadership and mentorship to other engineers.
• Collaborate with security, infrastructure, and engineering teams on identity architecture and platform improvements.

Education: Bachelor's degree or equivalent practical experience.

Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Benefits Information:

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.