Senior IAM Engineer - Lead Identity, PAM & Zero Trust

Franklin Fitch; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Franklin Fitch is seeking a Senior Cybersecurity Engineer to lead IAM, PAM and endpoint security across hybrid cloud and on-prem environments. You will drive secure identity infrastructure and strengthen Zero Trust controls, partnering with Cyber Operations and Infrastructure teams to deliver scalable security solutions.

Ideal candidates have 8+ years in cybersecurity engineering, hands-on experience with CrowdStrike Falcon, EntraID and M365, and a strong working knowledge of NIST/ISO 27001/CIS

Qualifications

• 8+ years of cybersecurity engineering experience with strong IAM, PAM, and endpoint security expertise.
• Experience with CrowdStrike Falcon, EntraID, and M365 suite.
• Experience securing hybrid environments across cloud and on-prem infrastructure.
• Knowledge of Zero Trust, threat modelling, identity governance, and security automation.
• Familiarity with security frameworks such as NIST, ISO 27001, and CIS.

Responsibilities

• Lead the implementation and optimization of IAM, PAM, and endpoint security solutions.
• Drive automation across identity lifecycle management, access governance, and compliance processes.
• Partner with Cyber Operations to enhance threat detection, response, and security monitoring.
• Conduct risk assessments and apply Zero Trust principles to identity and endpoint security.

Skills

IAM

PAM

Endpoint security

Zero Trust

Threat modelling

Identity governance

Security automation

Security frameworks knowledge

Tools

CrowdStrike Falcon

EntraID

M365 suite

Job description

Franklin Fitch is seeking a Senior Cybersecurity Engineer to lead IAM, PAM and endpoint security across hybrid cloud and on-prem environments. You will drive secure identity infrastructure and strengthen Zero Trust controls, partnering with Cyber Operations and Infrastructure teams to deliver scalable security solutions.

Ideal candidates have 8+ years in cybersecurity engineering, hands-on experience with CrowdStrike Falcon, EntraID and M365, and a strong working knowledge of NIST/ISO 27001/CIS