Senior Security Engineer - IAM
$150,000–$250,000 year
RemoteUnited States or Sarasota, Florida, United States
United States or Sarasota, Florida, United StatesRemoteFull Time$150,000–$250,000 yearSenior LevelSmall
Full TimeSenior LevelSmall
Job Summary
Define hardened identity standards for Entra ID, Active Directory, and Okta by mapping attack paths such as excessive privilege and weak authentication to drive remediation. Reduce customer IAM risk by reviewing designs with client architects and pushing back on overlooked risks. Advise the SOC and incident responders on identity-driven anomalies, token misuse, and lateral movement to scope incidents and contain threats. Mature SOC capabilities by closing detection gaps and refining containment playbooks for revoking sessions and cutting abused trust relationships.
Required Qualifications
- 7+ years deep in identity
- hands-on across Entra ID and Active Directory, Okta, and cloud IAM (AWS, GCP, Azure)
- real command of authentication, authorization, federation and trust, and privileged access
- The attacker's view of identity: how Kerberos, SAML, OAuth, and OIDC break in practice, and how a single foothold becomes privilege and then persistence
- A track record of hardening real identity environments and getting the fixes shipped, not just writing up the gaps
- The depth and credibility to be the authority on identity risk in any room, including across the table from a customer's own IAM architects
- Bachelor's degree in Computer Science, Cybersecurity, or Engineering, or a related field (or equivalent experience)
Desired Qualifications
- You can code, and you use AI to move faster: automating assessments, parsing sign-in and audit logs, and building tooling instead of doing it by hand
- Time in an MDR, MSSP, security consulting, or a high-growth startup
- Identity attack experience from the offensive side, or detection and IR work where identity was the story
- Relevant certifications such as Microsoft SC-300, Okta certifications, a cloud identity or security specialty, CISSP, or an offensive cert like CRTP or OSCP are a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.