Security Analyst – Identity and Access Management

EMCOR Group, Inc.; Las Vegas, Phoenix (NV, AZ); On-site; USD 102,000 - 112,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) Savings Plan

Employee assistance program

Job summary

EMCOR Group, Inc. is hiring a Security Analyst for Identity and Access Management (IAM) in Las Vegas, NV. This role supports EMCOR’s Security Program by managing identity systems, implementing solutions like single sign-on (SSO) and privileged access management (PAM).

The ideal candidate will have extensive experience with Microsoft Sentinel, Kusto Query Language (KQL), and Microsoft Defender. Responsibilities include incident management, monitoring emerging threats, and collaborating with IT teams to enhance IAM maturity.

Competitive compensation and a comprehensive benefits package are offered.

Qualifications

• Minimum of five years' experience with Microsoft Active Directory.
• At least three years' experience with Microsoft Entra ID.
• Minimum of two years' experience with Microsoft Defender and/or Microsoft Sentinel.
• One year’s experience with Privileged Access Management systems.
• Proficiency in using PowerShell for administration and automation.

Responsibilities

• Provide subject-matter expertise during security incidents.
• Design and maintain Microsoft Sentinel and Defender monitoring.
• Monitor emerging threats and advise stakeholders.
• Investigate and resolve IAM security incidents.
• Manage daily operations and support for IAM products.

Skills

Microsoft Active Directory

Microsoft Entra ID

Microsoft Defender

PowerShell

Privileged Access Management

MFA

SSO

SAML

OAuth

OpenID

SCIM

REST API

Job description

About Us

A Fortune 500\u2122 company, EMCOR Group, Inc. (NYSE: EME) is a leader in mechanical and electrical construction, industrial and energy infrastructure, and building services. EMCOR companies plan, install, operate, maintain, and protect the sophisticated and dynamic systems that create facility environments—such as electrical, mechanical, lighting, air conditioning, heating, security, fire protection, and power generation systems—in virtually every sector of the economy and for a diverse range of businesses, organizations, and government.

Job Summary

EMCOR Group, Inc. seeks a Security Analyst for Identity and Access Management (IAM) who will support EMCOR’s Security Program by administering identity systems, including single sign-on (SSO), privileged access management (PAM) and user lifecycle management. This role has a primary focus on Microsoft Sentinel and Microsoft Defender, using Kusto Query Language (KQL) to enhance threat detection, automate response, and strengthen the organization’s overall security posture in support of SOC operations and Identity Threat Detection and Response (ITDR).

Essential Duties & Responsibilities

• Must have the ability to provide subject-matter expertise during security incidents, document findings, and recommend improvements to incident response protocols.
• Must have experience designing, implementing, and maintaining Microsoft Sentinel and Microsoft Defender monitoring, including developing and tuning custom KQL queries and automation to enhance detection and response.
• Monitor emerging threats and advise stakeholders on responses.
• Investigate and resolve IAM security incidents using established tools and procedures.
• Support and monitor the enterprise information security system as directed by management.
• Manage daily operations and support for IAM products, including incident and ticket resolution.
• Administer Entra ID, with expertise in SSO, Conditional Access, and modern authentication methods.
• Deploy and maintain IAM systems for user lifecycle, access governance, and PAM.
• Collaborate with security and IT teams to enhance IAM maturity and awareness.
• Maintain and upgrade servers and applications supporting security tools.
• Perform special projects as needed.
• Support and maintain EMCOR’s Security Program.

Qualifications

• A minimum of five years' experience with Microsoft Active Directory, preferably within a multi-domain environment.
• At least three years' experience working with Microsoft Entra ID.
• A minimum of two years' experience utilizing the Microsoft Defender Platform and/or Microsoft Sentinel.
• At least one year’s experience with Privileged Access Management systems.
• Demonstrated proficiency in using PowerShell for administration and automation purposes.
• Practical experience and/or comprehensive understanding of one or more of the following technologies: MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.
• Proven ability to communicate effectively and interact professionally with personnel at all organizational levels.
• Strong project management capabilities.
• Ability to consistently deliver an exceptional standard of customer service.

Equal Opportunity Employer

Equal Opportunity Employer/Veterans/Disabled

Compensation

Compensation Range: $102,000.00 to $112,000.00.

Other Compensation: For example, indicate if the position is bonus or commission eligible.

Benefits

We are committed to providing employees a comprehensive benefits package which includes medical, dental, and vision coverage, along with health savings and flexible spending accounts, life insurance, disability, a 401(k) Savings Plan, College Coach and employee assistance program.