Remote Senior IAM Security Engineer

Amentum; San Juan (PR); On-site; USD 120,000 - 149,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Cybersecurity Engineer with IAM expertise to protect enterprise assets in a multi-tenant, hybrid cloud/on-premises environment. This is a fully remote role requiring US citizenship and US remote telework eligibility.

Responsibilities include implementing IAM controls across Entra ID, Okta, and AD; enforcing policy; and supporting audits and incident response. The role emphasizes security architecture translation, compliance with NIST/CMMC, and automation.

Qualifications

• Typically 8 years hands-on IAM security engineering with a bachelor’s; 4 years with a master’s.
• Hands-on experience securing Entra ID, Okta, and Active Directory in a hybrid environment.
• Strong knowledge of PAM, Self-Service Password Management, and JIT access.
• CISSP, CISM, or equivalent certification preferred.

Responsibilities

• Implement and operate enterprise IAM security controls across multi-tenant/hybrid Entra ID, Okta, and AD.
• Translate architectural standards into working security configurations, policies, and integrations.
• Maintain IAM-related security policies, standards, and best practices aligned with regulatory requirements (CMMC, NIST 800-171/800-172).
• Configure and tune identity security controls—access policies, privileged access workflows, authentication requirements.
• Serve as 2nd-level SOC escalation point for identity-related incidents.
• Investigate identity-related security anomalies using platform reporting, logs, and alerts.
• Support audit and assessment activities by maintaining compliant configurations and evidence for IAM controls.
• Automate recurring IAM security operations tasks.
• Maintain system and process documentation including compliance-relevant control documentation.
• Provide off-hours support as needed.
• Cover other assignments as needed.

Skills

IAM security engineering

Zero Trust

RBAC

ABAC

PAM

Entra ID

Okta

Active Directory

MFA policy enforcement

CMMC/NIST 800-171/800-172

Education

Bachelor’s degree in CS/IS

Master’s degree

Tools

Saviynt

SailPoint

Entra ID

Okta

Active Directory

Azure/M365

Job description

Amentum is seeking a Senior Cybersecurity Engineer with IAM expertise to protect enterprise assets in a multi-tenant, hybrid cloud/on-premises environment. This is a fully remote role requiring US citizenship and US remote telework eligibility.

Responsibilities include implementing IAM controls across Entra ID, Okta, and AD; enforcing policy; and supporting audits and incident response. The role emphasizes security architecture translation, compliance with NIST/CMMC, and automation.