Security Engineer

KellyMitchell Group; United States; Remote; USD 68,000 - 96,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

ESOP

401K offered

Job summary

KellyMitchell Group is seeking an IAM Security Engineer for a major U.S. airline to join its Cybersecurity and Digital Risk team, focusing on workforce identity. This 21-week contract is fully remote within the United States with no travel.

The role involves integrating applications with enterprise identity platforms, configuring SSO and MFA using SAML, OIDC, and OAuth, building Entra conditional access policies, migrating apps between platforms, and scripting onboarding for apps and users.

Qualifications

• Bachelor’s degree or equivalent work experience.
• 5+ years in identity and access management or security engineering.
• Hands-on configuring SAML, OIDC, and OAuth for applications.
• Experience building Microsoft Entra conditional access policies.
• Experience enabling SSO and MFA for enterprise apps.
• Experience migrating applications between identity platforms.
• Experience scripting IAM tasks (Python, PowerShell, Java, or JavaScript).
• Located in the U.S.

Responsibilities

• Configure authentication for applications using OIDC, SAML, and OAuth.
• Enable SSO and MFA for new and existing apps.
• Build and maintain Microsoft Entra conditional access policies.
• Migrate applications between identity platforms and providers.
• Develop scripts to onboard applications and users to identity platforms.
• Implement IAM designs from architects and analysts.
• Partner with development teams as IAM contact for new integrations.
• Troubleshoot and support existing IAM integrations and processes.
• Document IAM procedures and communicate security requirements.

Skills

SAML/OIDC/OAuth

Entra CA policies

Active Directory

Identity & access mgmt

Python scripting

PowerShell scripting

Education

Bachelor's degree or equivalent

Tools

Microsoft Entra

Azure AD

Active Directory

Job description

Job Summary

Our client, a major U.S. airline, is looking for an IAM Security Engineer to join their Cybersecurity and Digital Risk team, focused on workforce identity. It's a 21 week contract, fully remote within the U.S., with no travel. This person will integrate applications with the company's enterprise identity platforms, configuring SSO and MFA using OIDC, SAML, and OAuth, and building Microsoft Entra conditional access policies. They'll migrate applications between identity platforms, write scripts to automate onboarding of apps and users, implement designs from IAM architects, and support integrations after they go live. We're looking for someone who has personally configured and troubleshot SAML or OIDC application integrations and built conditional access policies in Entra, which is the key differentiator for this role. Experience limited to user provisioning, access requests, MFA resets, identity governance, or GRC work, or network security experience without hands-on application integration, is not a fit.

Core Responsibilities

• Configure authentication for applications using OIDC, SAML, and OAuth
• Enable SSO and MFA for new and existing applications
• Build and maintain Microsoft Entra conditional access policies
• Migrate applications between identity platforms and providers
• Develop scripts and automation to onboard applications and users to identity platforms
• Implement IAM designs and requirements provided by architects and analysts
• Partner with development teams as the IAM point of contact for new application integrations
• Troubleshoot and support existing IAM integrations and processes
• Document IAM procedures and communicate security requirements to users and teams

Required Skills/Experience (Must-Haves)

• Bachelor's degree or equivalent work experience
• 5+ years of experience in identity and access management or security engineering
• Hands-on experience configuring application authentication using SAML, OIDC, and OAuth
• Hands-on experience building Microsoft Entra (Azure AD) conditional access policies
• Experience enabling SSO and MFA for enterprise applications
• Experience migrating applications between identity platforms or providers
• Experience writing scripts to automate IAM tasks, such as Python, PowerShell, Java, or JavaScript
• Experience troubleshooting failed authentication and SSO issues
• Working knowledge of Microsoft Active Directory
• Located in the U.S.

Preferred Skills/Experience (Nice-to-Haves)

• Duo MFA experience
• Oracle Access Manager experience
• Microsoft Entra application proxy experience
• Experience with other identity platforms such as Okta, Ping, ADFS, or SiteMinder
• Microsoft Graph API experience
• CISSP certification
• Azure or Microsoft identity certifications, such as SC-300 or AZ-500
• Experience in a large enterprise with a large application portfolio

Key Competencies and Behaviors

• Hands-on engineer who builds and configures integrations directly
• Works independently and takes ownership of problems through resolution
• Strong troubleshooting skills across authentication flows and identity platforms
• Follows through on designs from architects with attention to detail
• Communicates clearly with developers, architects, analysts, and end users
• Comfortable mentoring less experienced peers when needed

Work Environment

• Location: Fully remote within the U.S., no travel
• Contract runs for 21 weeks
• Interview process includes two rounds

Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $49.00 and $70.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.