Identity Security Engineer
Cary, NC
Category: Security
Industry: Communications
Standard Hours: Open
Reference ID: JN -092026-108707
Date Posted: 09/21/2026
Shortcut: http://careers.eliassen.com/w39zr3
Description:
Hybrid in Cary, NC
Our client seeks an Identity Security Engineer to strengthen identity security and reduce privileged access risk across cloud, on-premises, and hybrid environments. You will engineer and support IAM and PAM solutions, advance Zero Trust through Zero Standing Privilege and Just-In-Time access, and partner with cross-functional teams to enable secure access to enterprise systems, data, and cloud resources.
This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.
Salary: $111,000 - $116,000/ yr. w2 plus 10% bonus
Responsibilities:
- Design, implement, and support enterprise IAM and PAM solutions across cloud, on-premises, and hybrid environments.
- Engineer privileged access capabilities including credential vaulting, password rotation, session management, privileged account onboarding, break-glass access, and account lifecycle management.
- Advance ZSP, JIT access, least privilege, privileged access reduction, and RBAC initiatives.
- Implement and support Microsoft Entra ID capabilities including Conditional Access, PIM, MFA, Identity Protection, passwordless authentication, and access security controls.
- Design and support application access management, SSO, federation, and modern authentication integrations using SAML, OAuth 2.0, OIDC, LDAP, and directory services.
- Secure privileged users, administrative accounts, service accounts, application identities, machine identities, agentic identities, and other non-human identities.
- Partner with infrastructure, cloud, application, and platform teams to onboard systems, applications, servers, databases, endpoints, and cloud resources into PAM and identity security platforms.
- Develop and maintain privileged access standards, administrative access models, engineering runbooks, operational procedures, and Zero Trust access control patterns.
- Automate identity and privileged access processes using PowerShell, Python, REST APIs, workflow orchestration, and platform integrations.
- Troubleshoot IAM and PAM platform issues, perform root cause analysis, and implement corrective actions to improve reliability and operational stability.
- Collaborate with Security Operations to investigate identity-related incidents, privileged access risks, control gaps, and suspicious activity involving high-risk identities.
- Communicate identity security risks, technical recommendations, and remediation plans to cross-functional teams, senior management, and business stakeholders.
- Other duties as assigned.
Experience Requirements:
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent combination of education and experience.
- 3+ years of experience designing, implementing, and supporting IAM, PAM, and identity security solutions in large enterprise environments.
- 2+ years of hands-on administration with CyberArk Privilege Cloud, CyberArk PAM, Delinea, BeyondTrust, or comparable PAM platforms.
- Demonstrated ability to own and improve ZSP, JIT access, least privilege, RBAC, break-glass access, and privileged access reduction capabilities.
- Strong working knowledge of Microsoft Entra ID, Conditional Access, PIM, MFA, Identity Protection, directory services, and modern authentication controls.
- Understanding of SSO, federation, authentication, and authorization technologies such as SAML, OAuth 2.0, OIDC, LDAP, Active Directory, and cloud identity platforms.
- Capability to deliver automation or integration using PowerShell, Python, REST APIs, or workflow automation is preferred.
- Proven ability to assess identity security risks, identify control gaps, recommend remediation, and communicate with technical and non-technical stakeholders.
- Strong judgment, ownership, urgency, customer focus, integrity, and ability to prioritize in a fast-paced environment.
- Approximately 5% travel may be required.
Education Requirements:
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent experience.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Cloud Infrastructure Engineer
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Greenwood Village, CO Our client seeks a Cloud Infrastructure Engineer to own the lifecycle of Kubernetes-based infrastructure on AWS. You will design and manage EKS clusters, build and maintain GitLab...
Date Posted: 09/01/2026 Recommended
-
Senior Cybersecurity Engineer
Cary, NC
Description: Hybrid Three days onsite per week. Tuesday – Thurday in Cary, NC Our client seeks a Senior Cybersecurity Engineer who will operate as a trusted technical advisor and hands-on engineer across network, cloud, and Zero Trust security domains....
Date Posted: 09/21/2026 Recommended
-
Data Engineer
Norfolk, VA
Description: On-site in Norfolk, VA Our client seeks a Data Engineer to design, build, integrate, and sustain secure enterprise data solutions that enable reliable analytics, reporting, operational insight, and informed decision-making. The role develo...
Date Posted: 09/16/2026 Recommended
-
Software Engineer III
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a senior software engineer to provide application support, maintenance, enhancement, and operational oversight for a business-critical physical security and access management platform...
Date Posted: 09/09/2026 Recommended
-
Data Platforms Administrator
4100 Coca Cola Plaza
Description: Hybrid 4/1 in Charlotte, NC Our client seeks a Data Platform Administrator to install, configure, maintain, and support data analytics and business intelligence platforms including Tableau, Sigma, Alteryx, Alation, DBT, Palantir, and Snowf...
Date Posted: 09/21/2026 Recommended
-
Senior AWS Cloud Architect/Engineer
Reston
Description: On-site in Reston, VA As a Senior AWS Cloud Architect/Engineer, you will be a key player in architecting, designing, and implementing cloud solutions that empower our clients to leverage the full potential of cloud technologies. You will b...
Date Posted: 08/25/2026 Recommended
-
GCP Cloud/Data Architect
Anywhere
Description: Remote Our client is undertaking a strategic cloud and data transformation initiative, migrating from AWS to Google Cloud Platform (GCP). This effort includes decommissioning an existing Snowflake environment hosted on AWS, standing up mod...
Date Posted: 08/30/2026 Recommended
-
Director of Cloud Infrastructure and Engineering
Owing Mills, MD
Description: Hybrid up to three days per week from home in either Owing Mills, MD or Baltimore, MD Our client seeks a Director of Cloud Infrastructure and Engineering to lead a globally distributed team that designs, develops, and deploys cloud infrast...
Date Posted: 09/01/2026 Recommended
-
Data Engineer
Anywhere
Description: Remote Our client seeks a senior Data Engineer to help launch a new initiative within Identity and Access Management. The contractor will build and evolve low-latency GraphQL APIs and data pipelines that support developer workflows across ...
Date Posted: 09/08/2026 Recommended
-
Java Software Engineer – Senior-Level
Anywhere
Description: Remote Our client seeks a senior-level Java Software Engineer to develop and maintain scalable Java applications within an automated DevSecOps AWS cloud environment supporting the Department of Commerce. The role includes designing cloud-n...
Date Posted: 09/23/2026 Recommended
-
Senior Software Engineer IV
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Senior Software Engineer to build and evolve enterprise AWS-based data platforms supporting Swift and Fabric Access Bridge. The role combines hands-on engineering with technical leadership ac...
Date Posted: 08/30/2026 Recommended
-
Java Software Engineer – Mid-Level
Anywhere
Description: Remote Our client seeks a mid-level Java Software Engineer to develop and maintain scalable Java applications in an automated DevSecOps AWS environment supporting the Department of Commerce. You will build cloud-native services, implement ...
Date Posted: 09/23/2026 Recommended
-
Lead Data Engineer
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a Lead Data Engineer to own architecture and delivery of scalable data platforms on AWS. The role will lead design of data lakes and warehouses, govern IAM and security, and implement resilient...
Date Posted: 09/09/2026 Recommended
-
AWS Cloud Data Engineer
Nashville, TN
Description: On-site in Nashville, TN Our client seeks a mid-level Cloud Data Engineer to design, build, and maintain scalable data solutions on AWS and Databricks. The role requires hands-on engineering, sound cloud architecture knowledge, and collabo...
Date Posted: 09/13/2026 Recommended
-
AWS AI Platform Engineer
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks an AWS AI Platform Engineer to enable and advance enterprise AI and machine learning capabilities within a secure, governed, and scalable environment. The role will architect, implement, and maint...
Date Posted: 09/08/2026 Recommended
-
Workday Security Analyst
Anywhere
Description: Remote Our client seeks a Workday Security Analyst to administer, audit, and optimize Workday security across HR, Payroll, Finance, Compliance, and IT stakeholders. The role will configure and maintain security policies and groups, govern ...
Date Posted: 09/17/2026 Recommended
-
Manager, Data Governance
Irvine, CA
Description: On-site in Irvine, CA Our client seeks a deeply technical Manager, Data Governance to design, build, and operationalize an enterprise data governance program across engineering, manufacturing, and supply chain data domains. The leader will...
Date Posted: 09/17/2026 Recommended
-
Senior Software Engineer
Concord, CA
Description: Hybrid 3 days onsite in either Concord, CA or Charlotte, NC or Dallas, TX Our client is seeking a Sr Software Engineer to support, enhance, and modernize its enterprise Kafka streaming platforms. This role combines technical expertise with...
Date Posted: 09/20/2026 Recommended
-
PACS Application Analyst IV
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client seeks a senior Physical Access Control System consultant with deep AMAG Symmetry expertise to lead or assist a large Symmetry upgrade to V11 and provide technical leadership for implementation, integ...
Date Posted: 09/17/2026 Recommended
-
Cloud Application Software Security Engineer
St. Louis, MO
Description: Hybrid 4 days on-site, 1 day work from home in St. Louis, MO Our client seeks a Cloud Application Software Security Engineer to remediate vulnerabilities and mature SDLC pipelines. The role will focus on addressing findings from Mythos, CV...
Date Posted: 09/08/2026 Recommended
-
Cloud Engineer
Anywhere
Description: Remote Our client seeks a Cloud Engineer to support Identity and Access Management within a Cyber line of business. The role focuses on building integrations with SaaS products, optimizing microservices, and maintaining critical SaaS tooli...
Date Posted: 09/09/2026 Recommended
-
Sr. Cloud Engineer (Azure)
Anywhere
Description: Remote Our client is seeking a Sr. Cloud Engineer (Azure) to design, deploy, secure, and optimize enterprise cloud infrastructure within Microsoft Azure for federal customers. The role includes implementing scalable cloud solutions, automa...
Date Posted: 09/19/2026 Recommended
-
Digital Forensics Specialist
Alexandria, VA
Description: Hybrid 2-3 days per week on-site in Alexandria, VA. Our client seeks a digital forensics specialist to conduct network and media investigations that support incident response, threat analysis, and enterprise security operations. The role w...
Date Posted: 08/30/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 08/25/2026 Recommended
-
Senior Cybersecurity Engineer
Anywhere
Description: Remote in either Remote or Washington, DC Our client is seeking a hands-on Senior Cybersecurity Engineer to help strengthen and scale cybersecurity practices across a growing software organization supporting mission-critical environments. ...
Date Posted: 09/18/2026 Recommended
-
Junior Penetration Tester
Anywhere
Description: Remote Our client seeks a Junior Penetration Tester to support security assessments across web applications, infrastructure, cloud environments, and related technologies connected to the client network. The role will develop test plans, pe...
Date Posted: 09/15/2026 Recommended
-
Tier 1 Security Analyst
Cary, NC
Description: On-site in Anaheim, CA Our client seeks a Tier 1 Security Analyst to support a 24x7 Security Operations Center. The mission is to monitor, alert, respond, and report on cyber threats targeting County of Orange assets, systems, and data. Th...
Date Posted: 09/21/2026 Recommended
-
Senior Java Developer
Boston, MA
Description: On-site 4 days onsite in Boston, MA Our client seeks a Senior Java Developer to build a new cloud-based application. The consultant will design and develop services and APIs using Java, Spring Boot, and microservices on AWS. The role requi...
Date Posted: 09/21/2026 Recommended
-
ServiceNow IRM/GRC Developer
Rockville, MD
Description: Hybrid 3 days onsite / 2 days remote in either Rockville, MD or Tysons Corner, VA Our client seeks a ServiceNow technical leader to develop, administer, and ensure quality across the enterprise ServiceNow platform. The role translates comp...
Date Posted: 09/20/2026 Recommended
-
Cybersecurity Firewall Analyst II
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Cybersecurity Firewall Analyst II to engineer, support, and optimize Palo Alto SASE and related inspection zone technologies in a large enterprise. The role will implement and maint...
Date Posted: 08/31/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above