Senior Identity Security Engineer (IAM & Cloud)

TENEX.AI; Missouri; On-site; USD 120,000 - 180,000; Full time

Job summary

TENEX.AI in the United States is seeking a Senior Security Engineer for IAM to own identity hardening across Entra ID, Active Directory, Okta and cloud IAM. You will analyze attacker paths and work with customers' IAM architects.

You will advise SOC and IR, define hardened identity standards, review designs with client teams, and push back when risk warrants it. The role requires deep identity expertise and a creative, hands-on approach.

Qualifications

• 7+ years deep in identity, hands-on across Entra ID and Active Directory, Okta, and cloud IAM (AWS, GCP, Azure).
• Strong command of authentication, authorization, federation and trust, and privileged access.
• Solid understanding of Kerberos, SAML, OAuth, and OIDC in real-world deployments.
• Track record of hardening identity environments and delivering fixes.

Responsibilities

• Define hardened identity across Entra ID, AD, Okta, and cloud IAM with actionable standards.
• Reduce IAM risk for customers by mapping attack paths and driving remediation.
• Collaborate with customer IAM teams and peer engineers to review designs and push back when needed.
• Advise SOC and incident responders on identity-driven detections and containment.
• Mature SOC response to identity attacks and close gaps in identity playbooks.

Skills

Identity management

Identity protocols

Identity hardening

Identity risk leadership

Automation & AI tooling

MDR/MSSP experience

Offensive identity

Education

Bachelor's degree

Security certifications (e.g., CISSP, SC-300)

Tools

Entra ID

Active Directory

Okta

Cloud IAM (AWS, GCP, Azure)

Job description

TENEX.AI in the United States is seeking a Senior Security Engineer for IAM to own identity hardening across Entra ID, Active Directory, Okta and cloud IAM. You will analyze attacker paths and work with customers' IAM architects.

You will advise SOC and IR, define hardened identity standards, review designs with client teams, and push back when risk warrants it. The role requires deep identity expertise and a creative, hands-on approach.