Note: The job is a remote job and is open to candidates in USA. ECS is a cybersecurity organization seeking an Identity Security Engineer to join its security operations division. The role focuses on designing, hardening, and evolving enterprise identity systems and Windows server infrastructure, reducing identity-based risk, monitoring threats, and improving security architecture and processes.
Responsibilities
- Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations
- Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging
- Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks
- Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls
- Experience enforcing least privilege, role-based access control (RBAC), and automating access provisioning and deprovisioning workflows
- Familiarity with Zero Trust identity principles — verify explicitly, enforce least privilege, and assume breach — and the ability to assess and mature an organization's identity posture against those principles
- Experience securing workload identities, service principals, and high-risk administrative accounts
- Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication
- Strong experience administering and hardening Windows Server environments in an enterprise setting
- Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective
- Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity lens
- Experience performing system monitoring, reviewing logs, and taking corrective action to maintain server integrity and availability
- Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
- Experience supporting security continuous monitoring efforts including risk assessments and system patching within Windows server environments
- Ability to identify gaps in current identity and server security capabilities and recommend both technical and process-level improvements
- Experience developing and contributing to technical security standards, monitoring standards, and security architecture documentation
- Comfortable working across teams including cybersecurity, networking, systems administration, and technology support partners
- Ability to communicate findings and risks clearly to both technical peers and senior leadership
Skills
- Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations
- Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging
- Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks
- Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls
- Experience enforcing least privilege, role-based access control (RBAC), and automating access provisioning and deprovisioning workflows
- Familiarity with Zero Trust identity principles — verify explicitly, enforce least privilege, and assume breach — and the ability to assess and mature an organization's identity posture against those principles
- Experience securing workload identities, service principals, and high-risk administrative accounts
- Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication
- Strong experience administering and hardening Windows Server environments in an enterprise setting
- Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective
- Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity lens
- Experience performing system monitoring, reviewing logs, and taking corrective action to maintain server integrity and availability
- Ability to create and maintain thorough system documentation covering installation, configuration, and troubleshooting procedures
- Experience supporting security continuous monitoring efforts including risk assessments and system patching within Windows server environments
- Ability to identify gaps in current identity and server security capabilities and recommend both technical and process-level improvements
- Experience developing and contributing to technical security standards, monitoring standards, and security architecture documentation
- Comfortable working across teams including cybersecurity, networking, systems administration, and technology support partners
- Ability to communicate findings and risks clearly to both technical peers and senior leadership
- A minimum of 5+ years of progressive experience in identity security and Windows server administration is required, with demonstrated experience operating at an engineering level rather than a purely operational or support capacity
- Candidates with hands-on Zero Trust identity implementation experience will be strongly preferred
Company Overview