Sr Cyber Security Engineer OnTrac · Virginia, USA +2 more

QuickCruit, Inc.; Virginia; Hybrid; USD 156,000 - 234,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with company match

Flexible vacation

Job summary

OnTrac is seeking a Sr Cyber Security Engineer to own IAM and PAM, with deep hands-on expertise in Entra ID, Microsoft 365, and vulnerability management. This senior IC role supports endpoint, cloud, and SaaS security and works closely with IT to secure infrastructure.

The candidate will act as a Tier 3 escalation point for CSIRT, translate control requirements into technical configurations, and contribute to GRC by evidence collection and automation.

Qualifications

• Bachelor’s degree or equivalent experience.
• 7+ years in IT/Security with 3+ years in IAM/PAM.

Responsibilities

• Own IAM/PAM, Entra ID, Microsoft 365, vulnerability mgmt, and MDM.
• Partner with IT for secure infrastructure and end-user services.

Skills

IAM

PAM

Entra ID

Microsoft 365

RBAC design

SSO integrations

PowerShell

Python

Bash

Identity lifecycle

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field

Tools

Qualys

Intune

JAMF

Entra ID / Microsoft 365

Job description

# Sr Cyber Security EngineerOnTrac · Virginia, USA +2 moreTailor My ResumeStart free. No credit card.### About the JobOnTrac is hiring a Sr Cyber Security Engineer (PAM / IAM)!Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact?Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S.Location: Remote - This position may be performed remotely in states where the company is authorized to employ individuals. Compensation: The expected starting base pay range for this position is $156,000 - $195,000, with full potential base salary range over a successful candidate’s tenure in the position of $156,000 - $234,000. This position may also be eligible for bonus, commission, or other incentive compensation in accordance with the terms of the applicable plan of up to a 20% Bonus Target. Employment Logistics: The Sr. Cyber Security Engineer is a senior-level individual contributor and hands-on technical owner for Identity and Access Management (IAM), Privileged Access Management (PAM), Entra ID, Microsoft 365, vulnerability management, and mobile device management. This broad security engineering role requires deep identity expertise alongside the ability to support endpoint, cloud, and SaaS security. The Engineer partners daily with IT to secure infrastructure and end-user services, enables the Cyber Security Incident Response Team (CSIRT) as a Tier 3 escalation point, and supports Governance, Risk, and Compliance (GRC) by translating control requirements into technical configurations and automated evidence collection.### BenefitsMedical, dental, and vision insurance Life and short- and long-term disability coverage 401(k) retirement savings plan with company match Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours Two (2) floating holidays per year Paid sick leave\\* Six (6) paid company holidays Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave Additional wellness and employee assistance programsThe Must-Haves:Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience 7+ years of progressive experience in IT and Security, including at least 3 years dedicated to IAM or security engineering in an enterprise environment Demonstrated hands-on ownership of at least two of the following: Entra ID / Microsoft 365 A PAM platform Qualys or equivalent vulnerability management platform Intune / JAMF device management Hands-on expertise with identity lifecycle, RBAC design, entitlement and access certification, federation and SSO integrations, and privileged-access tooling and workflows Strong working knowledge of Entra ID, including Conditional Access, Identity Protection, PIM, and entitlement management, plus the Microsoft 365 security and compliance stack Working knowledge of Intune, JAMF, and Google device management, including compliance policies, configuration profiles, and application deployment across mixed operating-system environments Strong scripting and automation skills using PowerShell, Microsoft Graph, Python, or Bash Ability to interpret NIST CSF, ISO 27001, or SOC 2 and implement the technical controls and evidence required to meet them Certifications such as SC-300, SC-200, AZ-500, CISSP, CISM, GIAC GCIA, GIAC GDSA, or relevant PAM, JAMF, or Qualys vendor certifications Ability to travel up to 10% It is the responsibility of every position to understand and adhere to the security guidelines outlined in OnTrac’s Acceptable Use policy and to conduct their activities accordingly.