Senior Identity & Access Security Engineer

Emploive

El Segundo, Northern (CA, KY)

Ibrido

USD 140.000 - 200.000

Tempo pieno

2 giorni fa

Candidati tra i primi

Generatore di candidature

Una candidatura completa in un minuto — curriculum e lettera di presentazione personalizzati, pronti da inviare.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Free daily lunch onsite

Fully stocked kitchen

Unlimited PTO

Casual dress code

Descrizione del lavoro

CHAOS Industries in Los Angeles area seeks a Senior Cybersecurity Engineer, Identity & Access Management, to own the identity layer that protects our data. You will design and operate IdP, IAM, PAM, PIM, and Secrets Management to work as one coherent system that meets regulatory standards.

You will partner with security operations, IT, HR, and compliance to translate policy into practical access controls from onboarding to offboarding, and you will influence the next direction of our identity

Competenze

5+ years of progressively responsible cybersecurity engineering experience.
At least two years of experience focused on IAM.
Hands‑on experience administering IdP in a production environment.
Hands‑on experience administering Entra ID or Active Directory.
Experience running the provisioning, access change, and deprovisioning steps of a JML process.
Experience designing authentication policies and deploying phishing‑resistant MFA across an organization.
Working knowledge of Kerberos, NTLM , LDAP , SAML , OAuth 2.0, OpenID Connect, and SCIM .
Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs.
Familiarity with NIST SP 800-207, Zero Trust Architecture and NIST SP 800-171 or NIST SP 800-53.
Experience producing compliance evidence for NIST SP 800-171, CMMC , FedRAMP, or a comparable framework.
Clear written communication, for both technical runbooks and policy documents.

Mansioni

Design, build, and maintain identity architecture and RBAC across cloud and on‑premises directory services.
Own and automate the IAM portion of the joiner, mover, and leaver ( JML ) process across identity, directory, cloud, and secrets platforms, so that access is provisioned at hire, adjusted when roles change, and revoked promptly at departure.
Coordinate with human resources and IT for employee records and device steps.
Design and tune authentication policies, conditional access, phishing‑resistant MFA, and device compliance requirements.
Build identity‑focused detections and threat hunts in SIEM, EDR, and SOAR tools, and support SOC during identity investigations.
Operate and mature a tiered administrative model, including PAWs and dedicated administrator accounts.
Administer privileged identity management for just‑in‑time role activation and privileged access reviews.
Administer enterprise password and secrets management platform, including RBAC policies, vault structure, SSO integration, and vaulting of credentials.
Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation.
Integrate SaaS and internal apps with SSO through SAML and OpenID Connect, and with SCIM for provisioning.
Maintain Active Directory security, account lifecycle hygiene, service accounts, and gMSAs, and attack path analysis.
Run periodic access reviews and produce assessment evidence for NIST SP 800-171 AC and IA families.
Write and maintain IAM policies, standards, and procedures.