Security Engineer – Identity and Access Management (IAM)

Daybright Financial; New Jersey; On-site; USD 110,000 - 150,000; Full time

Job summary

Daybright Financial, a leading benefits and retirement solutions provider, seeks a Security Engineer – Identity and Access Management (IAM) to join our Corporate Office in New Jersey. You will manage identity lifecycle, RBAC/ABAC, and access governance while collaborating with Security, IT, HR, and Compliance to strengthen controls.

Ideal candidates have 5–7 years in IAM or related IT control roles, plus experience with Microsoft Entra ID and PIM.

Qualifications

• 5-7 years of IAM, security operations or related IT control experience.
• Familiarity with authentication, authorization, and least-privilege concepts.
• Experience with IAM governance, access provisioning/deprovisioning, and reviews.
• Experience with audits and control testing in regulated environments.
• Strong communication and collaboration with stakeholders.

Responsibilities

• Execute identity lifecycle ops for joiner/mover/leaver events.
• Administer RBAC/ABAC across enterprise systems and cloud services.
• Support access requests, approvals, and documentation of exceptions.
• Perform periodic access reviews with system owners.
• Investigate identity and access incidents and mitigate risks.
• Monitor IAM controls and escalate gaps to teams.
• Maintain IAM runbooks and evidence for audits.

Skills

IAM

Security operations

Access governance

Audits & compliance

Communication

Collaboration

Attention to detail

Tools

Microsoft Entra ID

Privileged Identity Management

Lifecycle Workflows

Directory services

Job description

Simply put, we are one of the nation’s largest independent, privately held firms specializing in employee benefits, retirement plans, and all their associated compliance needs. Since 2008, we have grown by acquiring over 60 local and national firms that have been trusted members of their communities for decades. We hold the coveted “Best Places to Work – USA,” certification and serve more than 22,000 employer groups and 3.6 million plan participants nationally.

Daybright Financial also operates a dedicated independent divisional team, Daybright Broker Solutions, to further enhance the services, support, and marketing resources to grow the businesses of benefits brokers and consultants and enable professional employer organizations (PEOs) to bring more to the table for their clients — through the seamless delivery of Fortune 500-level health and financial wellness solutions.

For more information on Daybright Financial, visit daybright.com. Follow Daybright on LinkedIn, Instagram, Facebook, and YouTube.

Daybright is currently seeking a Security Engineer – Identity and Access Management (IAM) to join our Corporate Office. Be part of a team of thought leaders and seasoned benefits and retirement planning professionals.

Position Summary:

The Security Engineer - Identity and Access Management (IAM) supports Daybright Financial's identity and access management program by administering access controls, monitoring identity-related risk, and improving joiner-mover-leaver and access governance processes. This role partners with Security, IT, HR, Compliance, and application owners to ensure users receive the right access at the right time for the right reasons. The Security Engineer - IAM combines operational execution and continuous improvement to strengthen security, reduce access risk, and support regulatory requirements.

Job Responsibilties:

• Execute identity lifecycle operations for joiner, mover, and leaver events with accuracy and timeliness.
• Administer role-based and attribute-based access controls across enterprise systems and cloud services.
• Support access request, approval, and provisioning workflows, including documentation of exceptions.
• Perform periodic access reviews and certification activities with system owners and control stakeholders.
• Investigate and resolve identity and access incidents, including excessive privileges, orphaned accounts, and policy violations.
• Monitor IAM controls and metrics, escalating risks and control gaps to appropriate teams.
• Support privileged access management processes, including privileged account onboarding and control adherence.
• Contribute to segregation of duties analysis and remediation planning with business and control owners.
• Maintain IAM process documentation, runbooks, and control evidence for audits and assessments.
• Partner with IAM engineering and platform teams to improve automation, quality, and service reliability.

Required Skills/Experience

• 5-7 years of experience in identity and access management, security operations, or related IT control functions.
• Experience with Microsoft Entra ID, Privileged Identity Management, Lifecycle Workflows, and related Microsoft technologies.
• Understanding of authentication, authorization, directory services, federation, and least-privilege principles.
• Experience with access provisioning, deprovisioning, and periodic access certification processes.
• Familiarity with ticketing/workflow systems and disciplined case management.
• Strong analytical and problem-solving skills with attention to detail and data accuracy.
• Strong communication and collaboration skills across technical and non-technical stakeholders.
• Experience in financial services or another regulated environment preferred.
• Experience with IAM governance tools, identity providers, and privileged access management platforms preferred.
• Familiarity with standards and frameworks such as NIST, ISO 27001, and SOX-related access control expectations preferred.
• Experience with basic scripting or automation concepts to improve IAM workflows preferred.
• Experience participating in internal or external audits and control testing preferred.
• Relevant certifications or equivalent practical expertise in IAM, cybersecurity, or governance domains preferred.