Cybersecurity Staff Engineer

Cybersecurity Staff Engineer

Role Overview

We are looking for a skilled Cybersecurity Staff Engineer to join our team. The ideal candidate will be responsible for enhancing the security of our organization by focusing on identity security, access governance, and implementing security controls in hybrid environments. Collaboration with various teams will be essential in this role to ensure a secure identity posture across the organization.

Key Responsibilities

1. Active Directory (AD) Security & Administration

• Review and remediate AD findings related to user and computer accounts, privileged access, delegation, trusts, and domain controller security
• Perform AD cleanup activities such as removing inactive accounts and optimizing privileged group memberships
• Manage and enhance Group Policy Objects (GPOs) and assess domain trusts

2. Microsoft Entra ID (Azure AD) & M365 Security

• Review and improve Conditional Access policies, MFA enforcement strategies, and privileged roles
• Address risks related to stale identities, privileged access gaps, and strengthen tenant security posture

3. Identity Security & PAM

• Implement and support Privileged Access Management (PAM) solutions like CyberArk / Delinea
• Enhance controls for privileged accounts, support Zero Trust, and identity security initiatives

4. Hybrid Identity & Integration

• Manage and secure Entra Connect (Azure AD Connect) and support hybrid identity configurations
• Integrate identity systems with monitoring and security tools

5. Automation, Testing & Deployment

• Develop and maintain PowerShell scripts for automation and reporting
• Test changes in non-production environments and support production deployments
• Validate remediation and security improvements

6. Operations & Collaboration

• Support ServiceNow tickets related to Directory Services and IAM
• Collaborate with cross-functional teams and provide documentation, implementation evidence, and status updates

Required Skills & Experience

• 5-10+ years of experience in IAM / Directory Services
• Strong expertise in Active Directory (AD), Microsoft Entra ID (Azure AD), Conditional Access, Group Policy (GPO), and PowerShell scripting

Security & Tools Expertise

• Experience with PAM tools like CyberArk or Delinea
• Strong understanding of identity security best practices, privileged access governance, and AD hardening

Nice to Have

• Experience with Zero Trust architecture, identity governance, compliance, and logging & monitoring tools
• Certifications in Microsoft (Azure / Security / Identity), CyberArk, or IAM-related certifications

Soft Skills

• Strong communication and stakeholder management skills
• Analytical and problem-solving mindset
• Ability to work in fast-paced, enterprise environments

Deliverables

• Prioritized remediation/action plan
• Implemented IAM and security improvements
• Testing and validation reports
• Production rollout support
• Documentation and knowledge transfer