Senior Identity & Access Security Engineer

Expand Energy Corporation; Oklahoma City (OK); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Expand Energy Corporation is seeking a senior cybersecurity engineer to design, implement, and support enterprise identity and access management across AD, Okta, SailPoint, and CyberArk. You will translate architectures into reliable, auditable operational capabilities, mentor teammates, and lead critical IAM initiatives.

The role emphasizes hands‑on engineering, security best practices, and collaboration with cross‑functional teams to ensure secure, compliant access management across the

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, MIS, Computer Science, or related field.
• Minimum 8 years related work experience in cybersecurity engineering, IAM, directory services, and privileged access management.

Responsibilities

• Design, implement, administer, and support enterprise IAM services (AD, Okta, SailPoint, CyberArk).
• Lead technical ownership for directory services, authentication, and privileged access processes.
• Configure and maintain TLS certificates and GPO policies; enforce security patterns.

Skills

IAM architecture

Active Directory

Okta

SailPoint

CyberArk

PowerShell

Directory services

Zero Trust

RBAC

Automation

Education

Bachelor’s degree in Cybersecurity/Information Security/IT/CS

CISSP/CISM/Azure SC-300 or similar certification

Tools

Active Directory

Okta

SailPoint

CyberArk

Quest Active Roles Server

TLS certificate management

PowerShell

Job description

Expand Energy Corporation is seeking a senior cybersecurity engineer to design, implement, and support enterprise identity and access management across AD, Okta, SailPoint, and CyberArk. You will translate architectures into reliable, auditable operational capabilities, mentor teammates, and lead critical IAM initiatives.

The role emphasizes hands‑on engineering, security best practices, and collaboration with cross‑functional teams to ensure secure, compliant access management across the