Senior Platform Engineer - IAM & PAM Architect (Hybrid)

Eliassen Group; Burbank (CA); Hybrid; USD 121,000 - 134,000; Part time

Job summary

Eliassen Group seeks a Senior Platform Engineer in Burbank, CA to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. The role emphasizes automation, standardization, security remediation, and PAM onboarding within a hybrid environment.

This contract role requires W2 eligibility and offers medical, dental, vision benefits, 401k with company matching, and life insurance.

Qualifications

• 8+ years IAM engineering experience.
• Expertise in Active Directory architecture, administration, and engineering.
• Entra ID / Azure AD and Microsoft Identity Manager (MIM).
• ADFS and LDAP integrations.
• CyberArk or other enterprise PAM platforms.
• RBAC and PIM implementation.
• PKI architecture and certificate management.
• AD domain migrations and legacy domain decommissioning.
• Identity governance and compliance remediation.
• Vendor and supplier management in outsourced environments.

Responsibilities

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID.
• Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.
• Design and implement enterprise IAM solutions and integrations.
• Lead Active Directory consolidation and decommissioning of legacy domains.
• Support PAM onboarding including privileged account vaulting and credential management.
• Implement RBAC and PIM strategies.
• Conduct AD and Entra security assessments and drive remediation.
• Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.
• Develop technical designs, architecture documentation, and operational procedures.
• Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.
• Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.
• Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.
• Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.
• Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.

Skills

IAM engineering

Active Directory

Entra ID

PAM platforms

RBAC

PIM

PKI

Security governance

Tools

CyberArk

Job description

Eliassen Group seeks a Senior Platform Engineer in Burbank, CA to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. The role emphasizes automation, standardization, security remediation, and PAM onboarding within a hybrid environment.

This contract role requires W2 eligibility and offers medical, dental, vision benefits, 401k with company matching, and life insurance.