Senior IAM & PAM Security Engineer (Remote)

OnTrac; Virginia (MN); Remote; USD 156,000 - 234,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life and disability coverage

401(k) with company match

Flex vacation (not in CA/CO/IL/MA/MT//

Floating holidays

Paid sick leave

Six paid company holidays

Paid pregnancy and parental leave

Wellness programs

Job summary

OnTrac is seeking a Sr Cyber Security Engineer (PAM/IAM) to own identity and access management across Entra ID and hybrid Active Directory, while securing Microsoft 365, PAM tooling, and vulnerability management. This senior IC role partners with IT, supports CSIRT, and translates control requirements into technical configurations.

The role requires deep identity expertise, hands-on engineering across cloud and endpoint security, and readiness to work across enterprise security domains with

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 7+ years in IT and Security including 3+ years IAM/security engineering in enterprise.
• Hands-on ownership of Entra ID/Microsoft 365, a PAM platform, Qualys, Intune or JAMF.

Responsibilities

• Design, deploy, and maintain enterprise identity services across Entra ID and hybrid AD.
• Administer Microsoft 365 security configurations and posture baselines.
• Operate vulnerability management and device management across endpoints and mobile platforms.
• Partner with IT to secure infrastructure and end-user services.
• Support CSIRT as Tier 3 escalation and assist GRC with control evidence.

Skills

IAM/security engineering

Entra ID

Microsoft 365

PAM platform

Qualys

Intune/JAMF

RBAC design

SAML/OIDC

SSO

PowerShell

Python

NIST CSF

ISO 27001

SOC 2

PIM

Just-in-time elevation

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT or related field

Tools

Entra ID

Microsoft 365

Qualys

Intune

JAMF

Job description

OnTrac is seeking a Sr Cyber Security Engineer (PAM/IAM) to own identity and access management across Entra ID and hybrid Active Directory, while securing Microsoft 365, PAM tooling, and vulnerability management. This senior IC role partners with IT, supports CSIRT, and translates control requirements into technical configurations.

The role requires deep identity expertise, hands-on engineering across cloud and endpoint security, and readiness to work across enterprise security domains with