Senior Identity & Access Engineer (IAM)

Expand Energy Corporation; Oklahoma City (OK); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Job summary

Expand Energy Corporation in the United States seeks a cybersecurity engineer focused on identity and access management across Active Directory, Okta, SailPoint, CyberArk, and related platforms. This senior technical contributor designs, implements, and maintains secure access services and governance aligned with business requirements.

The role leads complex engineering efforts, mentors colleagues, participates in on-call support, and partners with infrastructure, cloud, and audit teams to

Qualifications

• Advanced IAM principles including SSO, MFA, federation, and Zero Trust.
• Experience administering complex AD environments with GPOs and delegation.
• Experience with Quest Active Roles Server and identity automation.
• Administration of Okta, SailPoint, and CyberArk platforms.
• PowerShell or similar scripting for identity and access automation.

Responsibilities

• Design, implement, administer, and support enterprise identity and access management services.
• Serve as a senior technical owner for directory services and access governance.
• Implement security patterns defined by cybersecurity architects.
• Maintain Active Directory security, OU structures, and GPO policies.
• Administer Quest Active Roles Server capabilities and workflows.
• Configure Okta SSO, MFA, federation, and integrations.
• Support SailPoint identity governance, entitlements, and provisioning.
• Administer CyberArk privileged access management and vaulting.
• Manage TLS certificate lifecycle and remediation of risks.
• Troubleshoot incidents; perform root-cause analyses and corrective actions.
• Identify automation opportunities using PowerShell and APIs.
• Partner with infra, cloud, audit, and business teams on secure access patterns.
• Develop and maintain technical docs, runbooks, and recovery procedures.
• Lead significant engineering work on identity modernization and access management.
• Mentor cybersecurity analysts and engineers; participate in on-call shifts.
• Perform other duties as assigned

Skills

Identity & access mgmt

Active Directory

Okta admin

SailPoint

CyberArk

TLS certificates

PowerShell

Automation scripting

Documentation

Mentoring

Education

High school diploma or GED

Bachelor’s degree in IT, MIS, CS or related field

Tools

Quest Active Roles Server

GPO

Microsoft Active Directory

Okta

SailPoint IdentityNow

CyberArk

Job description

Expand Energy Corporation in the United States seeks a cybersecurity engineer focused on identity and access management across Active Directory, Okta, SailPoint, CyberArk, and related platforms. This senior technical contributor designs, implements, and maintains secure access services and governance aligned with business requirements.

The role leads complex engineering efforts, mentors colleagues, participates in on-call support, and partners with infrastructure, cloud, and audit teams to