Senior Platform Engineer

Eliassen Group; Burbank (CA); Hybrid; USD 121,000 - 134,000; Part time

Job summary

Eliassen Group seeks a Senior Platform Engineer in Burbank, CA to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. The role emphasizes automation, standardization, security remediation, and PAM onboarding within a hybrid environment.

This contract role requires W2 eligibility and offers medical, dental, vision benefits, 401k with company matching, and life insurance.

Qualifications

• 8+ years IAM engineering experience.
• Expertise in Active Directory architecture, administration, and engineering.
• Entra ID / Azure AD and Microsoft Identity Manager (MIM).
• ADFS and LDAP integrations.
• CyberArk or other enterprise PAM platforms.
• RBAC and PIM implementation.
• PKI architecture and certificate management.
• AD domain migrations and legacy domain decommissioning.
• Identity governance and compliance remediation.
• Vendor and supplier management in outsourced environments.

Responsibilities

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID.
• Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.
• Design and implement enterprise IAM solutions and integrations.
• Lead Active Directory consolidation and decommissioning of legacy domains.
• Support PAM onboarding including privileged account vaulting and credential management.
• Implement RBAC and PIM strategies.
• Conduct AD and Entra security assessments and drive remediation.
• Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.
• Develop technical designs, architecture documentation, and operational procedures.
• Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.
• Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.
• Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.
• Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.
• Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.

Skills

IAM engineering

Active Directory

Entra ID

PAM platforms

RBAC

PIM

PKI

Security governance

Tools

CyberArk

Job description

Senior Platform Engineer

Burbank, CA

Type: Contract

Category: Security

Industry: Communications

Standard Hours: Open

Reference ID: JN -102026-108935

Date Posted: 10/05/2026

Shortcut: http://careers.eliassen.com/fDpMuX

Description:

Hybrid 4 Days a week on-site in either Burbank, CA or Orlando, FL or Seattle, WA

Our client seeks a Senior Platform Engineer to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. The role will focus on identity lifecycle automation, Active Directory standardization, security remediation, and PAM onboarding within a complex hybrid environment.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $88.00 to $96.99/hr. w2

JN -102026-108935

Responsibilities:

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID.

• Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.

• Design and implement enterprise IAM solutions and integrations.

• Lead Active Directory consolidation and decommissioning of legacy domains.

• Support PAM onboarding including privileged account vaulting and credential management.

• Implement RBAC and PIM strategies.

• Conduct AD and Entra security assessments and drive remediation.

• Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.

• Develop technical designs, architecture documentation, and operational procedures.

• Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.

• Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.

• Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.

• Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.

• Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.

Experience Requirements:

• 8+ years of IAM engineering experience.

• Expertise in Active Directory architecture, administration, and engineering.

• Entra ID / Azure AD and Microsoft Identity Manager (MIM).

• Active Directory Federation Services (ADFS) and LDAP integrations.

• CyberArk or other enterprise PAM platforms.

• RBAC and PIM implementation.

• PKI architecture and certificate management.

• AD domain migrations and legacy domain decommissioning.

• Identity governance and compliance remediation.

• Vendor and supplier management in outsourced environments.

• Preferred: CyberArk expertise, Idira experience, cross-tenant Entra ID governance, security baseline assessments, and enterprise-scale identity modernization.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.

About Eliassen Group:

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.

Eliassen is committed to building a diverse and inclusive team from a variety of backgrounds, perspectives, and skills. We are an Equal Opportunity and Afine. All employment decisions are based on merit, performance, and business needs. Eliassen does not discriminate on the basis of race, color, gender identity or expression, sexual preference or orientation, sex (including pregnancy, childbirth, and related medical conditions), marital status, creed, religion, physical or mental disability, genetic information, military or veteran status, age, ancestry, national origin, citizenship status, prohibited criminal record inquiries of applicants and employees, or any other category protected by federal, state, or local laws.