Senior Identity & Access Security Engineer

Expand Energy; Oklahoma City (OK); On-site; USD 110,000 - 160,000; Full time

Job summary

Expand Energy seeks a senior cybersecurity engineer to design, implement, and support enterprise identity and access management solutions. You will translate security architecture into reliable operational capabilities across Active Directory, Okta, SailPoint, CyberArk, and TLS management.

You will mentor engineers, drive complex projects, and ensure IAM platforms remain secure, auditable, and compliant with business needs and regulatory requirements.

Qualifications

• Minimum 8 years of cybersecurity engineering and IAM experience.
• Strong hands-on experience with AD, Okta, SailPoint, and CyberArk.
• Experience with TLS certificate management and GPOs.
• Ability to translate cybersecurity architecture into practical engineering tasks.

Responsibilities

• Design, implement, administer, and support enterprise IAM services (AD, Okta, SailPoint, CyberArk).
• Lead senior technical ownership for directory services and access governance.
• Implement architectures and security patterns defined by cybersecurity leaders.
• Maintain Active Directory security, including GPO policies and privileged access controls.
• Automate repetitive tasks with PowerShell and APIs to improve efficiency.

Skills

Active Directory

Okta

SailPoint

CyberArk

Privileged Access

Identity Governance

TLS Certificates

GPO Management

PowerShell

Automation

Troubleshooting

Communication

Education

Bachelor's degree in Cybersecurity/IT

Certs in security (CISSP/CISM)

Job description

Expand Energy seeks a senior cybersecurity engineer to design, implement, and support enterprise identity and access management solutions. You will translate security architecture into reliable operational capabilities across Active Directory, Okta, SailPoint, CyberArk, and TLS management.

You will mentor engineers, drive complex projects, and ensure IAM platforms remain secure, auditable, and compliant with business needs and regulatory requirements.