Senior Privileged Access & Active Directory Engineer

Signal Hill Technologies; Washington, Baltimore (District of Columbia, MD); Hybrid; USD 150,000 - 185,000; Full time

Benefits offered by this job

Company health plan

401(k) plan with employer match

Paid holidays and paid time off

Job summary

Signal Hill Technologies is seeking a Senior IAM Engineer to design and deploy privileged access for a large federal OT environment. You will own the PAM capability from design through production rollout, integrating with AD and Okta, ensuring least-privilege and just-in-time access, and implementing robust auditing and recovery plans.

The ideal candidate has extensive on-prem AD experience, understands certificate services and security tooling, and can navigate complex, isolated networks with

Qualifications

• Public Trust eligible; U.S. citizenship or green card and able to pass a background check.
• Strong written and verbal communication; explain identity and access decisions to technical and non-technical audiences.
• 5+ years in IT/cybersecurity engineering; 2+ years on-premises Active Directory engineering.
• Hands-on deployment of BeyondTrust in a large environment with password vaulting.
• Hands-on on-premises Active Directory engineering in a large enterprise (forest and domain design, GPO, tiering).
• Experience integrating Active Directory with Okta for SSO and MFA (SAML, OIDC, Kerberos, LDAP).
• Compensation: $150k-$185k annually; Company health plan, 401(k) with employer match, paid holidays and PTO.

Responsibilities

• Design and deploy BeyondTrust Privileged Remote Access across a large, multi-site OT environment.
• Integrate privileged access with Active Directory and Okta for secure authentication.
• Build least-privilege and just-in-time access workflows with password vaulting.
• Configure session recording and audit logging feeding the central SIEM.
• Engineer resilient access that remains functional when connectivity is lost.
• Harden and maintain the PAM platform for performance and availability across sites.
• Produce designs, runbooks, and security documentation for approval (ATO).

Skills

Active Directory

BeyondTrust

Okta

Password vaulting

SSO

MFA

SAML

Kerberos

LDAP

Session monitoring

Tools

BeyondTrust PAM

Password Safe

Okta

Job description

Signal Hill Technologies is seeking a Senior IAM Engineer to design and deploy privileged access for a large federal OT environment. You will own the PAM capability from design through production rollout, integrating with AD and Okta, ensuring least-privilege and just-in-time access, and implementing robust auditing and recovery plans.

The ideal candidate has extensive on-prem AD experience, understands certificate services and security tooling, and can navigate complex, isolated networks with