Security Analyst - Identity and Access Management

EMCOR Group; Phoenix, Las Vegas (AZ, NV); Sur place; USD 97 000 - 107 000; Plein temps

Avantages offerts par ce poste

Medical coverage

Dental coverage

Vision coverage

Health Savings Account

Flexible Spending Accounts

Life insurance

Disability insurance

401(k) Savings Plan

College Coach

Employee assistance program

Résumé du poste

EMCOR Group, Inc. is seeking a Security Analyst – Identity and Access Management (IAM) to support the Security Program by administering identity systems, including SSO, PAM, and user lifecycle management.

The role emphasizes Microsoft Sentinel and Defender, using KQL to enhance threat detection and automate responses in SOC operations. The ideal candidate will have extensive AD/Entra ID experience, strong PowerShell skills, and a track record of improving IAM maturity.

Qualifications

• Five+ years of experience with Microsoft Active Directory, preferably in a multi-domain environment.
• At least three years with Microsoft Entra ID.
• Two+ years with Microsoft Defender Platform and/or Microsoft Sentinel.
• At least one year with Privileged Access Management systems.
• Proficient in using PowerShell for administration and automation.
• Experience with MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.

Responsabilités

• Provide subject-matter expertise during security incidents and document findings.
• Design, implement, and maintain Microsoft Sentinel and Defender monitoring with custom KQL queries.
• Monitor emerging threats and advise on responses to stakeholders.
• Investigate and resolve IAM security incidents using established tools and procedures.
• Support and monitor the enterprise information security system as directed by management.
• Manage daily IAM operations and incident/ticket resolution.
• Administer Entra ID with SSO, Conditional Access, and modern authentication.
• Deploy and maintain IAM systems for user lifecycle, access governance, and PAM.
• Collaborate with security and IT teams to mature IAM processes.
• Maintain and upgrade servers and applications supporting security tools.
• Perform special projects as needed.

Connaissances

Active Directory

Entra ID

Microsoft Defender/Sentinel

Privileged Access Management

PowerShell

SSO

MFA

KQL

Outils

Microsoft Defender/ Sentinel

KQL

Entra ID

Description du poste

About Us

A Fortune 500® company, EMCOR Group, Inc. (NYSE: EME) is a leader in mechanical and electrical construction, industrial and energy infrastructure, and building services. EMCOR companies plan, install, operate, maintain, and protect the sophisticated and dynamic systems that create facility environments—such as electrical, mechanical, lighting, air conditioning, heating, security, fire protection, and power generation systems—in virtually every sector of the economy and for a diverse range of businesses, organizations, and government.

Job Summary

About Us:

EMCOR Group, Inc. (NYSE: EME) is a Fortune 500 company and a leader in mechanical and electrical construction, industrial and energy infrastructure, and building services.

A provider of critical infrastructure systems. EMCOR gives life to new structures and sustains life in existing ones by it planning, installing, operating, maintaining, and protecting the sophisticated and dynamic systems that create facility environments. This includes electrical, mechanical, lighting, air conditioning, heating, security, fire protection, and power generation systems--in virtually every sector of the economy and for a diverse range of businesses, organizations and government. EMCOR represents a rare combination of broad reach with local execution, combining the strength of an industry leader with the knowledge and care of 170 locations.

Job Title: -- Security Analyst – Identity and Access Management

Job Summary: -- The Security Analyst for Identity and Access Management (IAM) is responsible for supporting EMCOR’s Security Program by administering identity systems, including single sign-on (SSO), privileged access management (PAM) and user lifecycle management. This role has a primary focus on Microsoft Sentinel and Microsoft Defender, using Kusto Query Language (KQL) to enhance threat detection, automate response, and strengthen the organization’s overall security posture in support of SOC operations and Identity Threat Detection and Response (ITDR).

Essential Duties and Responsibilities

• Must have the ability to provide subject-matter expertise during security incidents, document findings, and recommend improvements to incident response protocols.
• Must have experience designing, implementing, and maintaining Microsoft Sentinel and Microsoft Defender monitoring, including developing and tuning custom KQL queries and automation to enhance detection and response.
• Monitor emerging threats and advise stakeholders on responses.
• Investigate and resolve IAM security incidents using established tools and procedures.
• Support and monitor the enterprise information security system as directed by management.
• Manage daily operations and support for IAM products, including incident and ticket resolution.
• Administer Entra ID, with expertise in SSO, Conditional Access, and modern authentication methods.
• Deploy and maintain IAM systems for user lifecycle, access governance, and PAM.
• Collaborate with security and IT teams to enhance IAM maturity and awareness.
• Maintain and upgrade servers and applications supporting security tools.
• Perform special projects as needed.

Qualifications

• A minimum of five years' experience with Microsoft Active Directory, preferably within a multi-domain environment.
• At least three years' experience working with Microsoft Entra ID.
• A minimum of two years' experience utilizing the Microsoft Defender Platform and/or Microsoft Sentinel.
• At least one year’s experience with Privileged Access Management systems.
• Demonstrated proficiency in using PowerShell for administration and automation purposes.
• Practical experience and/or comprehensive understanding of one or more of the following technologies: MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.
• Proven ability to communicate effectively and interact professionally with personnel at all organizational levels.
• Strong project management capabilities.
• Ability to consistently deliver an exceptional standard of customer service.
• Accountability and Measurement: Support and maintain EMCOR’s Security Program.

Equal Opportunity Employer

As a leading provider of mechanical and electrical construction, facilities services, and energy infrastructure, we offer employees a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and success. Equal Opportunity Employer/Veterans/Disabled.

Affirmative Action Policy

Please review our Affine Action Policy.

Geographic Disclosure

As a leading provider of mechanical and electrical construction, facilities services, and energy infrastructure, we offer employees a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and success. Equal Opportunity Employer/Veterans/Disabled.

Compensation Range: $97,000 - $107,000

Other Compensation: This position is bonus eligible

• Benefits: We are committed to providing employees a comprehensive benefits package which includes medical, dental, and vision coverage, along with health savings and flexible spending accounts, life insurance, disability, a 401(k) Savings Plan, College Coach and employee assistance program.
• Benefits: We are committed to providing employees a comprehensive benefits package which includes medical, dental, and vision coverage, along with health savings and flexible spending accounts, life insurance, disability, a 401(k) Savings Plan, College Coach and employee assistance program.