Remote Senior Security Engineer — IAM/PAM Specialist

OnTrac; Virginia; Remote; USD 156,000 - 234,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life and disability insurance

401(k) with company match

Paid time off and holidays

Paid parental leave

Wellness programs

Job summary

OnTrac is seeking a Sr Cyber Security Engineer (PAM / IAM) to lead identity and access management and support security across enterprise environments. This senior individual contributor role partners with IT to secure infrastructure, endpoints, cloud services, and governance programs.

Candidates bring 7+ years in IT security with hands-on IAM/PAM, Entra ID, Microsoft 365, vulnerability management, and scripting.

Qualifications

• 7+ years of IT and security experience, including IAM/security engineering in enterprise environments.
• Hands-on ownership of IAM/PAM, Entra ID and Microsoft 365, and related tooling.
• Experience with vulnerability management, device management, and SSO/federation.
• Strong scripting/automation skills (PowerShell, Python, Bash).
• Ability to translate controls into technical configurations and evidence.

Responsibilities

• Design, deploy, and maintain enterprise identity services across Entra ID and hybrid AD.
• Implement SSO, MFA, federation, RBAC, access reviews, and privileged-access workflows.
• Operate security for endpoints, cloud, and SaaS environments, with CSIRT support.
• Translate NIST CSF / ISO 27001 / SOC 2 requirements into technical controls.
• Automate recurring identity and access tasks using scripting languages.
• Collaborate with IT and GRC teams to meet audits and risk remediation.

Tools

Entra ID / Microsoft 365

Qualys

Intune

JAMF

Microsoft Graph

PowerShell

Python

Bash

RBAC design

Job description

OnTrac is seeking a Sr Cyber Security Engineer (PAM / IAM) to lead identity and access management and support security across enterprise environments. This senior individual contributor role partners with IT to secure infrastructure, endpoints, cloud services, and governance programs.

Candidates bring 7+ years in IT security with hands-on IAM/PAM, Entra ID, Microsoft 365, vulnerability management, and scripting.