Iam Governance Engineer Jobs

1 job found

Today

Cybersecurity Engineer

Kimley-Horn Warrenville, IL

Warrenville, IL

Today

Full time Ai Security Cloud Identity Security Cloud Platforms

Apply Now

Job Description

Kimley-Horn is seeking a Cybersecurity Engineer to support the Information Security team in strengthening the firm’s protection across cloud environments, identities, data, and AI technologies. This role emphasizes cloud security, identity and access, data protection, privileged access controls, and governance for AI and agentic AI capabilities.

Location and Work Mode

Location: Warrenville, IL
Work setup: Onsite (in-office position)

Role Focus

Secure cloud infrastructure by identifying risks and translating decisions into security outcomes
Drive Identity and Access Management (IAM) initiatives across authentication, authorization, and identity governance
Protect sensitive data using Data Loss Prevention (DLP) across cloud services, endpoints, collaboration platforms, and AI-enabled applications
Implement and manage Privileged Access Management (PAM) capabilities for privileged administrative and service identities
Establish security policies and governance for AI and agentic AI technologies, including authentication, authorization, monitoring, and lifecycle management

Key Responsibilities

Analyze cloud infrastructure to understand and communicate risks, concerns, and the outcomes of security decisions
Lead IAM initiatives, including authentication, authorization, privileged access management, conditional access, and identity governance
Develop and maintain DLP controls to protect sensitive business data across cloud services, endpoints, collaboration platforms, and AI-enabled applications
Design, implement, and operate PAM solutions, including privileged account lifecycle management, just-in-time access, credential protection, session monitoring, and privileged access governance
Define security policies and governance for AI and agentic AI technologies that require authentication, authorization, monitoring, and lifecycle management
Track cloud application vulnerabilities using security tooling and coordinate with development teams to plan remediation
Conduct threat modeling, security assessments, and architecture reviews for cloud services, AI applications, and new technology deployments
Partner with IT, infrastructure, and application teams to integrate security controls into cloud platforms, identity services, and AI-powered business solutions
Participate in tabletop exercises and simulations to test and improve incident response plans
Support compliance, audit, and risk management by documenting security controls, procedures, and technical standards

Required Qualifications

Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field
Experience: 5+ years in Cloud Security, Identity and Access Management, Information Security, or a similar enterprise-level role
Certifications: Professional certifications such as Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP, or other relevant security certifications
Experience designing, implementing, and supporting security controls in Microsoft Azure, AWS, or other enterprise cloud environments
Hands-on experience with IAM technologies including authentication, authorization, single sign-on (SSO), federation, identity governance, and conditional access
Experience administering or supporting PAM solutions, including privileged account governance, just-in-time access, credential vaulting, and privileged session management
Experience implementing and managing DLP, information protection, and data governance controls across cloud services, endpoints, and collaboration platforms
Knowledge of AI and agentic AI security concepts, including governance, identity lifecycle management, authorization models, and monitoring of AI agents
Knowledge of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, and Zero Trust Architecture
Strong analytical, troubleshooting, and problem-solving skills
Experience with change-management policies and procedures
Strong communication skills in writing and verbally, with the ability to convey complex technical concepts to non-technical stakeholders

Technologies and Tools

Microsoft Azure, AWS
Microsoft Entra ID
PIM, Identity Governance, Conditional Access
Microsoft Purview DLP and Information Protection
CyberArk, OneIdentity, Delinea
Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP
NIST CSF, CIS Controls, ISO 27001
Zero Trust Architecture

Preferred Skills

Microsoft Entra ID, PIM, Identity Governance, and Conditional Access
Microsoft Purview DLP and Information Protection
CyberArk, OneIdentity, Delinea, or similar PAM platforms
Security automation and orchestration experience
AI and agentic AI security governance
Experience managing machine identities, service accounts, and workload identities
Threat modeling and cloud security architecture review experience

Benefits

Exceptional Retirement Plan: 2-to-1 company match on up to 4% of eligible compensation (salary + bonus) plus additional profit-sharing contribution
Comprehensive Health Coverage: Low-cost medical, dental, and vision insurance options
Time Off: Personal leave, flexible scheduling, floating holidays, and half-day Fridays
Financial Wellness: Student loan matching in the 401(k) and performance-based bonuses
Professional Development: Tuition reimbursement and extensive internal training programs
Family-Friendly Benefits: New Parent Leave, family building benefits, and childcare resources

View full job page →

Get Iam Governance Engineer Jobs alerts

New Iam Governance Engineer Jobs, daily.