Senior Cybersecurity Engineer, Identity & Access Management

The role

The Senior Cybersecurity Engineer, Identity & Access Management will own the identity layer to protect Controlled Unclassified Information and export-controlled technical data. You will design, build, and maintain identity architecture and automate the joiner, mover, and leaver process.

What you will do

• Design, build, and maintain identity architecture and role-based access control across cloud and on-premises directory services.
• Own and automate the IAM portion of the joiner, mover, and leaver process.
• Design and tune authentication policies, conditional access, phishing-resistant MFA, and device compliance requirements.
• Build identity-focused detections and threat hunts in SIEM, EDR, and SOAR tools.
• Operate and mature a tiered administrative model, including privileged access workstations and dedicated administrator accounts.
• Administer privileged identity management for just-in-time role activation and privileged access reviews.
• Administer the enterprise password and secrets management platform.
• Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation.
• Integrate SaaS and internal applications with single sign-on through SAML, OpenID Connect, and SCIM.
• Maintain Active Directory security and run periodic access reviews for NIST SP 800-171 compliance.

Required qualifications

• Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field with 5+ years of progressively re
• At least two years of experience focused on IAM.
• Hands-on experience administering IdP in a production environment.
• Hands-on experience administering Entra ID or Active Directory.
• Experience running the provisioning, access change, and deprovisioning steps of a JML process.
• Experience designing authentication policies and deploying phishing-resistant MFA across an organization.
• Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs.
• Familiarity with NIST SP 800-207, Zero Trust Architecture and NIST SP 800-171 or NIST SP 800-53.
• Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework.
• Clear written communication, for both technical runbooks and policy documents.

Nice to have

• Experience with IAM in a cloud platform such as Microsoft Azure or Amazon Web Services (AWS)
• Experience administering an enterprise password or secrets management platform
• Experience with identity automation platforms
• Experience with Microsoft 365 GCC High or another US government cloud environment
• Experience implementing PIM, PAWs, or a tiered administrative model
• Experience with Active Directory attack path analysis tools such as BloodHound or PingCastle
• Proficiency in a Query Language such as Elasticsearch Query Language (ES|QL), Kusto Query Language (KQL), or similar
• Experience deploying certificate-based authentication or FIDO2 security keys
• A relevant certification, such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP
• Experience working in the Defense Industrial Base (DIB)

Benefits

• Medical, dental, and vision benefits 100% paid for by the company
• 401k (+ 50% company match up to 6% of pay)
• FSA
• HSA
• life insurance
• Free daily lunch while you're working onsite
• fully-stocked kitchen
• unlimited PTO
• casual dress code
• pre-IPO stock option grants
• relocation assistance
• annual bonuses (coming soon)

Before you apply

• CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.

About the company

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company was founded in 2022 and is headquartered in Los Angeles.