Senior Identity and Access Engineer

We Are EXOS; Indianapolis (IN); On-site; USD 110,000 - 170,000; Full time

Job summary

We Are EXOS is seeking an experienced IT security engineer specializing in identity and access management to strengthen client security postures. You will own the identity baseline, enforce phishing-resistant MFA, and implement privileged access management across multiple client environments.

Lead automation with Graph API and PowerShell, develop runbooks, and deliver client posture reports. This role requires multiple tenants experience and collaboration with MSP/MSSP teams.

Qualifications

• 7+ years in IT or security engineering with focus on identity and access management.
• Experience with Microsoft Entra ID: Conditional Access, PIM, Identity Protection and access reviews.
• Ability to automate at scale using Graph API and PowerShell; multi-tenant tooling.

Responsibilities

• Own the client identity security baseline across multiple tenants.
• Enforce MFA for remote access and apps; manage phishing-resistant MFA implementations.
• Configure and maintain privileged access management and just-in-time elevation.
• Develop runbooks and templates for runbooks and remediation.
• Produce client posture reports and remediation roadmaps.
• Collaborate with MSP/MSSP teams to scale identity services.

Skills

IAM engineering

Cybersecurity

Documentation

Client reporting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft Entra ID

PowerShell

Graph API

LAPS

AD/AD DS

Job description

In 2009 EXOS established itself as an IT consulting and staff augmentation firm . We specialize in focusing on what the client needs and adapting to how our client works . Our number one goal is to deliver the RIGHT solution, with the RIGHT resource, for the RIGHT price at the RIGHT time .

The Company has three areas of focus:

Professional Services and Consulting: As a full-service IT consulting firm, we offer a wide array of services to adapt to our clients' businesses. No matter what is needed, we have a solution that fits. Whether it be custom application development or providing highly specialized IT resources to run a project, we assist our clients to ensure their IT initiatives cross the finish line.

Staffing: Our solutions foster stronger relationships with customers, suppliers, and partners, which greatly improve our clients' productivity, while reducing overall IT costs.

Managed Services : We realize our clients don't have the time to worry about the most important tools that its people use--technology. We take care of our client's network and service its system.

Our Values

We are Empowering

At EXOS we empower our clients by providing them with essential strategic IT guidance, reliable service, and the talent necessary to achieve their business goals . We empower our team by living a culture of collaboration, trust, and learning, creating growth opportunities, and charting a clear career path for all our team members.

We are Connected

At EXOS we are connected to our clients and their purpose. We are not just a talent and technology partner ; we are an extension of your business. We seek to understand where leadership is driving the company, and we connect across all aspects of the business necessary to make that goal a reality. We are connected to the communities we serve and invested in organizations that make them great places to live. As the EXOS team, we are connected through our common commitment to our cultural imperatives: the 'Three Ps' - Be Positive, Be Productive and Be Progressive in the since that we are always challenging each other to learn and grow.

We are Trusted

For more than fifteen years EXOS has been a trusted partner in providing Talent, IT and Cybersecurity solutions for our clients. Whether it's servicing large-scale enterprise clients or start up professional firms, our team is there to help solve pain points and provide strategic direction. The trust we have with one another as a team is earned. We live a culture of accountability with a goal of excellence. We are invested in one another's success, personally and professionally. We are a trust first, learn together and celebrate collectively team.

What You Will Do

• Own the EXOS identity security standard: the Conditional Access baseline, tiered admin model, privileged access configuration, and phishing-resistant MFA standard that every client inherits.
• Enforce MFA on all client remote access, both VPN and internal application access, and block legacy authentication.
• Build and run privileged access management: just-in-time admin elevation, separated cloud-only admin accounts, and on-prem tiered administration with LAPS.
• Deploy phishing-resistant MFA (FIDO2, passkeys, Windows Hello for Business), starting with privileged accounts and expanding to users.
• Stand up scheduled access reviews and stale or over-privileged account reporting, delivered as a recurring remediation list.
• Operate identity threat detection and response tooling to catch token theft, impossible travel, and MFA fatigue, and tune it across client tenants.
• Automate it with reusable templates and scripting (Microsoft Graph API, PowerShell) so the work scales across our client base.
• Produce a per-client identity posture report, and build the runbooks that let the broader team execute the standard.

Job Requirements

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related discipline or equivalent hands-on experience or military training.
• Earned relevant certifications such as SC-300 Identity and Access Administrator, SC-100 Cybersecurity Architect Expert, MS-102 M365 Administrator or AZ-104 Azure Administrator, or SC-200 Security Operations Analyst (a plus, not a substitute for hands-on experience).
• GDAP/Lighthouse/CIPP administration experience.
• Experience writing client-facing posture reports and remediation roadmaps.

Experience

• 7+ years in IT or security engineering, with 3+ years focused on identity and access management in Microsoft environments (Entra ID + on-prem AD).
• Worked hands-on in production with Microsoft Entra ID: Conditional Access, Privileged Identity Management, Identity Protection, and access reviews.
• Automated identityworkat scale with Microsoft Graph API and PowerShell, building reusable multi-tenant tooling.
• Deployed phishing-resistant MFA (FIDO2, passkeys, Windows Hello for Business) in real environments.
• Hardened on-prem Active Directory: tiered admin models, LAPS, and the hybrid identity attack paths that enable lateral movement.
• Worked with identity threat detection and response tooling.
• Delivered identity across many client environments in a multi-tenant MSP or MSSP setting.