Note: The job is a remote job and is open to candidates in USA. Daybright Financial is a financial services firm specializing in employee benefits, retirement plans, and related compliance services. The Security Engineer – Identity and Access Management (IAM) will administer identity and access controls, support lifecycle and governance processes, investigate access risks, and collaborate with security, IT, HR, compliance, and application teams to strengthen security and meet regulatory requirements.
Responsibilities
- Execute identity lifecycle operations for joiner, mover, and leaver events with accuracy and timeliness
- Administer role-based and attribute-based access controls across enterprise systems and cloud services
- Support access request, approval, and provisioning workflows, including documentation of exceptions
- Perform periodic access reviews and certification activities with system owners and control stakeholders
- Investigate and resolve identity and access incidents, including excessive privileges, orphaned accounts, and policy violations
- Monitor IAM controls and metrics, escalating risks and control gaps to appropriate teams
- Support privileged access management processes, including privileged account onboarding and control adherence
- Contribute to segregation of duties analysis and remediation planning with business and control owners
- Maintain IAM process documentation, runbooks, and control evidence for audits and assessments
- Partner with IAM engineering and platform teams to improve automation, quality, and service reliability
Skills
- 5-7 years of experience in identity and access management, security operations, or related IT control functions
- Experience with Microsoft Entra ID, Privileged Identity Management, Lifecycle Workflows, and related Microsoft technologies
- Understanding of authentication, authorization, directory services, federation, and least-privilege principles
- Experience with access provisioning, deprovisioning, and periodic access certification processes
- Familiarity with ticketing/workflow systems and disciplined case management
- Strong analytical and problem-solving skills with attention to detail and data accuracy
- Strong communication and collaboration skills across technical and non-technical stakeholders
- Experience in financial services or another regulated environment preferred
- Experience with IAM governance tools, identity providers, and privileged access management platforms preferred
- Familiarity with standards and frameworks such as NIST, ISO 27001, and SOX-related access control expectations preferred
- Experience with basic scripting or automation concepts to improve IAM workflows preferred
- Experience participating in internal or external audits and control testing preferred
- Relevant certifications or equivalent practical expertise in IAM, cybersecurity, or governance domains preferred
Company Overview