Senior IAM Engineer - Identity & Access Management

Expand Energy; Spring (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

Expand Energy seeks a senior cybersecurity engineer to design, implement, and support enterprise IAM services including Active Directory, Okta, SailPoint, and CyberArk. You will lead complex engineering efforts, mentor teammates, and ensure identity platforms are secure, auditable, and aligned with regulatory requirements.

Responsibilities include implementing security patterns, managing TLS certificates, and driving automation to improve efficiency, while collaborating with infrastructure and

Qualifications

• Minimum: 8 years related work experience in cybersecurity engineering or enterprise tech functions.
• Experience implementing and supporting enterprise IAM services in complex environments.
• Ability to translate security architecture and control objectives into practical engineering tasks.

Responsibilities

• Design, implement, administer, and support enterprise identity and access management services (AD, Okta, SailPoint, CyberArk).
• Lead senior technical ownership for directory services, authentication, and privileged access.
• Configure, support, and troubleshoot Okta SSO, MFA, federation and related identity controls.
• Administer TLS certificate lifecycle management and certificate authorities.
• Mentor junior staff and drive automation to improve efficiency.

Skills

Active Directory

Okta

SailPoint

CyberArk

TLS certificates

PowerShell

Identity governance

Zero Trust

Education

Bachelor’s degree in Cybersecurity / Information Security / IT / MIS / CS

Tools

Quest Active Roles Server

Microsoft Active Directory

Job description

Expand Energy seeks a senior cybersecurity engineer to design, implement, and support enterprise IAM services including Active Directory, Okta, SailPoint, and CyberArk. You will lead complex engineering efforts, mentor teammates, and ensure identity platforms are secure, auditable, and aligned with regulatory requirements.

Responsibilities include implementing security patterns, managing TLS certificates, and driving automation to improve efficiency, while collaborating with infrastructure and