Senior Cybersecurity Engineer, Identity & Access Management
CHAOS Industries2 days ago
Base Salary
$140k - $200k/yr
Responsibilities
- Design, build, and maintain identity architecture and RBAC across cloud and on-premises directory services.
- Own and automate IAM-related joiner, mover, and leaver processes across identity, directory, cloud, and secrets platforms.
- Design authentication policies, conditional access, phishing-resistant MFA, and device compliance requirements.
- Build identity-focused detections and threat hunts in SIEM, EDR, and SOAR tools and support identity-related SOC investigations.
- Operate tiered administrative controls, privileged access workstations, dedicated administrator accounts, and just-in-time privileged identity activation.
- Administer enterprise password and secrets management, including vault structures, SSO integration, and privileged and shared credential vaulting.
- Manage cloud IAM, including role assignments, service identities, and workload identity federation.
- Integrate SaaS and internal applications with SSO through SAML and OpenID Connect and automated provisioning through SCIM.
- Maintain Active Directory security, account lifecycle hygiene, service accounts, gMSAs, and attack path analysis.
- Run access reviews, produce NIST SP 800-171 compliance evidence, and maintain IAM policies, standards, and procedures.
Requirements
- Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, information technology, information assurance, or a related field with 5+ years of progressively responsible cybersecurity engineering experience, or a master’s degree with 3+ years of relevant experience.
- At least two years of IAM-focused experience and hands-on production IdP administration experience.
- Hands-on experience administering Entra ID or Active Directory and operating JML provisioning, access-change, and deprovisioning processes.
- Experience designing authentication policies and deploying phishing-resistant MFA across an organization.
- Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
- Scripting experience with PowerShell, Python, or a comparable language, including identity provider APIs.
- Familiarity with NIST SP 800-207, Zero Trust Architecture, and NIST SP 800-171 or NIST SP 800-53.
- Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework.
- Clear written communication for technical runbooks and policy documents.
- Preferred qualifications include cloud IAM experience with Microsoft Azure or AWS, enterprise password or secrets management, identity automation, Microsoft 365 GCC High or another US government cloud, PIM, PAWs, tiered administration, BloodHound or PingCastle, ES|QL or KQL, certificate-based authentication, FIDO2 security keys, SC-300 or CISSP certification, and Defense Industrial Base experience.
Benefits
- Medical, dental, and vision benefits are 100% paid by the company.
- 401k with a 50% company match up to 6% of pay, FSA, HSA, life insurance, and other benefits.
- Free daily lunch while working onsite, a fully stocked kitchen, unlimited PTO, and casual dress code.
- Competitive base salary, pre-IPO stock option grants, relocation assistance, and annual bonuses planned for the future.
- The role is onsite, as indicated by the #LI-onsite designation.
- The company has offices in Los Angeles, Washington, D.C., San Francisco, San Diego, and London.
About CHAOS Industries
CHAOS Industries builds networked sensing, communications, and real-time software systems for defense, government security, commercial aviation, and critical infrastructure operators. It sells integrated hardware–software platforms and related services to government and industrial customers. Founded in 2022 and headquartered in Los Angeles, the privately held company also maintains offices in Washington, D.C., San Francisco, San Diego, Seattle, and London, and its products are designed for fielded, time-critical operations.