Remote Senior IAM/PAM Security Engineer

OnTrac; Washington (District of Columbia); Hybrid; USD 156,000 - 234,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid leave and holidays

Flexible vacation policy

Job summary

OnTrac is seeking a Sr Cyber Security Engineer (PAM / IAM) to own identity and privileged-access engineering across Entra ID and hybrid AD, with strong Microsoft 365 and vulnerability management expertise. This senior individual contributor role partners with IT, supports CSIRT, and enables GRC through automated evidence collection and control implementations.

The role involves designing secure identity workflows, integrating SSO and MFA, and applying security by design across cloud and on‑prem

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• 7+ years of IT and Security with at least 3 years in IAM/security engineering in an enterprise.
• Hands-on ownership of Entra ID, PAM, or Qualys, plus device management platforms.
• Strong scripting using PowerShell, Python, or Bash; familiarity with Microsoft 365 security.

Responsibilities

• Design and deploy enterprise identity services across Entra ID and hybrid AD.
• Manage PAM, SSO, MFA, and access reviews with governance and break-glass practices.
• Operate vulnerability tooling (Qualys) and coordinate remediation SLAs.
• Partner with IT to implement security by design for projects and migrations.
• Support CSIRT, GRC processes, and automated evidence collection.

Skills

IAM

PAM

Entra ID

Microsoft 365

Vulnerability management

Scripting

Education

Bachelor’s degree in Computer Science or related field

Tools

Qualys

Intune

JAMF

Google device management

PowerShell

Python

Microsoft Graph

Job description

OnTrac is seeking a Sr Cyber Security Engineer (PAM / IAM) to own identity and privileged-access engineering across Entra ID and hybrid AD, with strong Microsoft 365 and vulnerability management expertise. This senior individual contributor role partners with IT, supports CSIRT, and enables GRC through automated evidence collection and control implementations.

The role involves designing secure identity workflows, integrating SSO and MFA, and applying security by design across cloud and on‑prem