Identity Security

Identity Security Engineer Jobs

3 jobs found

Today

Lead Identity Security Engineer

Cognizant New York, NY

New York, NY

Today

$115k - $134k/yr Full time Manager Senior Cloud Identity Security

Apply Now

Job Description

Cognizant is seeking a Lead Identity Security Engineer to help drive enterprise Identity Security initiatives from strategy through implementation. Based onsite in New York, NY, this role leads architecture and engineering efforts across IGA, ITDR, PAM, and policy-based access control capabilities, with a focus on integration, monitoring, and operational readiness.

In this position, you will provide technical leadership for identity security platforms, including SailPoint Identity Security Cloud and CrowdStrike Identity Protection, while building identity risk signal integrations and identity-centric detection and response workflows.

Key Responsibilities

Lead enterprise Identity Security initiatives across IGA, ITDR, PAM, and Policy-Based Access Control (PBAC).
Define and execute Identity Security strategy, roadmap, architecture, and implementation approach aligned with business and security objectives.
Provide architectural oversight and technical leadership for SailPoint Identity Security Cloud, CrowdStrike Identity Protection, and related Identity Security platforms.
Design and implement identity risk signal integrations across SailPoint ISC, CrowdStrike Identity Protection, Active Directory, Microsoft Entra ID, PAM solutions, and existing security platforms.
Develop and operationalize identity threat detection and response capabilities to identify account compromise, privilege escalation, lateral movement, insider threats, and credential abuse.
Lead detection engineering, including use case design, correlation logic, monitoring content development, alert tuning, and optimization.
Drive SIEM integrations to improve identity-centric threat analytics, monitoring, dashboards, and threat-hunting capabilities.
Establish workflow automation, orchestration, and response mechanisms to accelerate identity-related incident remediation.
Lead PBAC model implementation, access governance frameworks, entitlement management, and risk-based access controls.
Oversee PAM onboarding, integration, governance, monitoring, and operational processes for enterprise privileged accounts.
Partner with executive stakeholders and governance forums to deliver program updates, risk visibility, and strategic guidance.
Create operational runbooks and playbooks, maintain architecture documentation, develop testing plans, and deliver transition-to-support materials.

Required Qualifications

8+ years of experience in Identity & Access Management (IAM), Identity Governance, Cybersecurity Architecture, or Identity Security Engineering.
Deep expertise in SailPoint Identity Security Cloud (ISC) implementation, integration, governance, and access lifecycle management.
Hands-on experience with CrowdStrike Identity Protection, ITDR capabilities, and identity risk monitoring.
Strong understanding of Privileged Access Management, including CyberArk, BeyondTrust, Delinea, or equivalent PAM solutions.
Experience implementing identity security controls using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and modern federation protocols.
Expertise in identity threat detection, incident response, threat hunting, and security monitoring use case development.
Experience integrating IAM, IGA, PAM, Active Directory, Entra ID, and SIEM platforms in enterprise environments.
Knowledge of policy-based access control, role management, identity governance, and compliance requirements.
Experience working in Agile delivery environments and leading cross-functional security transformation initiatives.
Excellent stakeholder management, executive communication, technical leadership, and governance experience.
Relevant certifications in SailPoint, CyberArk, SC-300, CISSP, CISM, or equivalent identity and security technologies are highly desirable.

Technologies

SailPoint Identity Security Cloud (ISC)
CrowdStrike Identity Protection
Privileged Access Management (CyberArk)
BeyondTrust
Delinea
SAML
OAuth 2.0
OpenID Connect (OIDC)
SCIM
Active Directory
Microsoft Entra ID
SIEM
CyberArk
SC-300
CISSP
CISM

Compensation

The annual salary range for this position is USD 114,500 - 134,000, depending on experience and other qualifications. This role is also eligible for Cognizant’s discretionary annual incentive program, subject to the terms of applicable plans.

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

Application deadline: 30 Sep 2026.

View full job page →

26d ago

Cyber Identity - CIAM Security Engineer/Consultant

Deloitte Hermitage, TN

Hermitage, TN

26d ago

$83k - $163k/yr Full time Ciam Cybersecurity Cybersecurity Tools

Apply Now

Job Description

Work onsite in Hermitage, TN delivering end-to-end Customer Identity and Access Management (CIAM) security solutions across identity platforms and protocols.

Responsibilities

Support the design and implementation of Customer Identity and Access Management (CIAM) solutions aligned to client digital transformation and security objectives
Participate in end-to-end CIAM engagements covering requirements gathering, current-state assessment, solution design, testing, deployment, and production support
Configure and support CIAM capabilities across Transmit Security, Ping Federate, Okta, and ForgeRock including authentication, federation, registration, multi-factor authentication, adaptive access, and customer identity lifecycle processes
Translate business and technical requirements into scalable identity solutions and produce delivery artifacts such as documentation, process flows, and test plans for client readiness
Collaborate with business stakeholders, cyber specialists, developers, testers, and alliance/vendor teams to drive delivery milestones, resolve issues, and build trusted client relationships through quality delivery

Requirements

BA/BS degree in Computer Science, Cyber Security, Information Security, Engineering, Information Technology, Finance, Business, or a relevant field
2+ years of industry experience
2+ years of experience in Identity and Access Management
1+ year of hands-on experience customizing Transmit Security and Ping Identity tools (required)
Ability to travel 25-50% on average based on work, clients, and industries/sectors served
Limited immigration sponsorship may be available

Preferred

Previous consulting or Big 4 project management experience
Certifications such as Ping Identity/Transmit Security, CISSP, CISM, or CISA (a plus)
Design, develop, and implement secure and scalable solutions supporting CIAM infrastructure
Troubleshoot and resolve access-related issues and incidents efficiently
Integrate Identity solutions such as Transmit Security and Ping Identity with applications, directories, and identity sources
Collaborate closely with application owners and teams to support seamless integration
Demonstrate advanced understanding of authentication protocols including SAML, OAuth, and WS-Fed
Document configurations, processes, and procedures for maintenance and future reference
Identify and resolve performance bottlenecks and system issues proactively

Technologies

Transmit Security
Ping Federate
Okta
ForgeRock
Ping Identity
SAML, OAuth, WS-Fed

Team Context

Enables trust and safety of online communications and digital products by protecting users, consumers, and patients from harm
Helps clients provide consumer confidence in who they are dealing with and maintain the integrity of access to data

Skills for Success

Ability to work independently and collaborate as part of a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Compensation & Location

Location: Hermitage, TN (onsite)
Salary: USD 82,600 - 162,800 per year
The disclosed range estimate has not been adjusted for applicable geographic differential; compensation decisions depend on facts and circumstances of each case, and it is not typical for an individual to be hired at or near the top of the range

View full job page →

1mo ago

IAM Security Engineer

JMS Technical Solutions Seattle, WA

Seattle, WA

1mo ago Closed

Up to $65/hr Contract Cloud Platforms Identity and Access Management Identity Security

This position is no longer accepting applications (closed Sep 6, 2026).

Job Description

Contract IAM Security Engineer role with a Seattle, WA client from JMS Technical Solutions, offering a hybrid schedule (one day remote) for a 3-month contract. You will help deliver identity security programs across multiple IAM and privileged access platforms while coordinating planning, execution, and risk management with security, compliance, and business stakeholders.

What you’ll work on

Own end-to-end program planning, scheduling, and execution for one or more identity security workstreams.
Build and maintain detailed project plans, dependency maps, risk registers, and RAID logs.
Lead sprint planning plus PI Planning and backlog grooming within an SAFe/Agile delivery model.
Facilitate cross-team ceremonies including standups, demos, retrospectives, and steering committee reviews.
Track and report program health, milestones, and KPIs to senior leadership and the CISO organization.
Proactively identify, escalate, and resolve blockers, risks, and inter-workstream dependencies.
Drive delivery of Privileged Access Management (PAM) using BeyondTrust Password Safe, Endpoint Privilege Management (EPM), and Privileged Remote Access (PRA).
Support Microsoft Entra ID (Azure AD) initiatives including conditional access policy governance, hybrid identity, and lifecycle management.
Partner with IGA teams on SailPoint IdentityNow configuration, access certification campaigns, and role engineering.
Coordinate Okta identity platform hardening, including phishing-resistant MFA (FastPass, FIDO2/WebAuthn), device assurance policies, and authenticator enrollment controls.
Translate technical identity requirements into project scope, acceptance criteria, and delivery milestones.
Serve as the primary point of contact for program status across technology, security, compliance, and business stakeholders.
Prepare and deliver executive-ready status reports, steering committee decks, and program dashboards.
Partner with Vendor Management and Procurement on contingent resource onboarding and statement of work management.
Coordinate with audit and compliance teams ( SOX, PCI-DSS, NIST ) to ensure delivery timelines support control testing windows.

What you bring

Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related experience.
2+ years of direct experience in an Identity and Access Management role.
Experience with at least one major cloud identity platform: Okta or Microsoft Entra ID.
Proficiency scripting with PowerShell or Python for automation.
Hands-on experience with Infrastructure as Code, particularly Terraform.
Strong understanding of modern authentication and federation: SAML, OIDC, OAuth 2.0, SCIM.
Experience with hybrid identity models connecting cloud IdPs to on-premises Active Directory.
SailPoint Certified IdentityIQ Associate or SailPoint Certified IdentityNow Professional is preferred.

Technologies

BeyondTrust Password Safe, Endpoint Privilege Management (EPM), Privileged Remote Access (PRA), Microsoft Entra ID (Azure AD), SailPoint IdentityNow, Okta, FastPass, FIDO2/WebAuthn, PowerShell, Python, Terraform, SAML, OIDC, OAuth 2.0, SCIM, Active Directory, SailPoint IdentityIQ, SAFe, Agile.

Location: Seattle, WA (hybrid). Compensation: USD 65 per hour. Experience: 2+ years. Job type: contract.

View full job page →

Identity Security Engineer Jobs

Lead Identity Security Engineer

Cyber Identity - CIAM Security Engineer/Consultant

IAM Security Engineer

Get Identity Security Engineer Jobs alerts