Remote Identity & Security Engineer

Ledgent Technology; United States; Hybrid; USD 130,000 - 140,000; Full time

Job summary

Ledgent Technology is seeking an Identity and Security Engineer to lead architecture, engineering, and monitoring of enterprise identity services for hybrid environments. The role emphasizes AD, Entra ID, IAM, PAM, PKI, and cloud integrations across on-prem and cloud.

The ideal candidate will drive modernization initiatives, design secure identity frameworks, and collaborate with security, compliance, and DevOps teams. Strong PowerShell and IaC skills are expected.

Qualifications

• 8+ years of experience engineering enterprise Active Directory environments.
• 5+ years of hands-on experience with Microsoft Entra ID in hybrid environments.
• Deep expertise with AD DS, Entra ID, ADCS, and SSO technologies.
• Strong understanding of IAM principles, RBAC, and identity governance.
• Experience designing federation, SSO, and MFA solutions.
• Knowledge of Kerberos, LDAP, SAML, OAuth 2.0, OIDC.
• Experience with PKI, AD Certificate Services, and certificate lifecycle management.
• Experience with PAM platforms and privileged access controls.
• PowerShell scripting and automation capability.
• Experience with Microsoft Graph API and Terraform or similar tools.
• Understanding of Zero Trust concepts and identity protection.
• Experience with Defender for Identity, Entra ID Protection, and XDR platforms.

Responsibilities

• Design, implement, optimize, and maintain enterprise identity platforms (AD DS, Entra ID, SSO, MFA).
• Architect secure identity frameworks using RBAC, CA, least privilege, and JIT access.
• Develop identity governance programs and access lifecycle processes.
• Lead identity services across hybrid cloud and on-premises environments.
• Establish governance and security controls for service accounts and non-human identities.
• Integrate identity platforms with enterprise apps and business systems.
• Partner with security, compliance, infra, apps, and DevOps teams to enforce secure identity practices.
• Lead PKI design, certificate lifecycle, and authentication modernization.
• Engineer PAM & secure vendor remote access solutions.
• Develop identity monitoring, auditing, and anomaly detection capabilities.
• Support identity threat detection and response using ITDR, EDR, SIEM.
• Provide Tier 3 escalation for complex auth issues.
• Implement security controls to prevent identity-based threats.
• Create PowerShell automation and API integrations; pursue IaC solutions.
• Support audits with identity-focused controls and evidence.
• Lead identity-centric projects through design to operational transition.
• Create and maintain technical runbooks and docs.
• Evaluate emerging IAM/security technologies and propose improvements.

Skills

Active Directory

Entra ID

IAM

PAM

PKI

RBAC

Conditional Access

Just-in-Time (JIT) access

SAML

OAuth 2.0

OIDC

PowerShell

Terraform

Microsoft Graph API

Python

ITDR

EDR

SIEM

Zero Trust

On-call support

Tools

PowerShell

Terraform

Microsoft Graph API

Python

Job description

Ledgent Technology is seeking an Identity and Security Engineer to lead architecture, engineering, and monitoring of enterprise identity services for hybrid environments. The role emphasizes AD, Entra ID, IAM, PAM, PKI, and cloud integrations across on-prem and cloud.

The ideal candidate will drive modernization initiatives, design secure identity frameworks, and collaborate with security, compliance, and DevOps teams. Strong PowerShell and IaC skills are expected.