- Company Name
- IZAR Associates, Inc.
- Job Title
- Information Technology Security Engineer
- Job Description
-
**Job Title:** Information Technology Security Engineer – Privileged Access Management (PAM)
**Role Summary:**
Skilled security engineer responsible for designing, implementing, and maintaining privileged access controls across on‑premises (AD, Linux, macOS) and multi‑cloud environments (Azure, AWS, GCP). Focuses on vaulting, endpoint least‑privilege, identity hygiene, and Zero‑Trust architecture to reduce attack surface and ensure compliance with NIST and other standards.
**Expectations:**
- Deliver PAM solutions that enforce just‑in‑time, approval‑based access.
- Reduce standing administrator rights and improve endpoint privilege posture.
- Align privileged access practices with Zero‑Trust and regulatory frameworks.
- Produce clear documentation, runbooks, and compliance reports.
- Collaborate with desktop engineering, IGA, audit, and risk teams.
- Work onsite for the first month, then hybrid (3 days onsite/2 days remote).
**Key Responsibilities:**
- Administer corporate vaulting platform for credentials across AD, Entra ID, Linux, Azure, AWS, GCP.
- Implement credential randomization and JIT access for admin and service accounts.
- Deploy and maintain endpoint least‑privilege policies on Windows, Linux, macOS.
- Lead local administrator cleanup and enforce removal of unauthorized admin rights.
- Harden cloud tenant hygiene; monitor stale accounts, privileged roles, excess permissions.
- Apply ITDR practices to detect and respond to privileged‑activity anomalies.
- Contribute to enterprise Zero‑Trust design; promote passwordless, MFA, SSO for privileged identities.
- Manage privileged roles in Azure AD, AWS IAM, GCP IAM; integrate with PAM vaulting and session recording.
- Automate provisioning, de‑provisioning, and recertification of privileged accounts with IGA tools.
- Create/maintain runbooks, architecture diagrams, operational procedures; provide usage and compliance reporting.
**Required Skills:**
- 7+ years in PAM, IAM, or security engineering.
- Hands‑on experience with Active Directory, Entra ID, Linux, and at least one cloud platform (Azure, AWS, or GCP).
- Expertise in vaulting technologies and endpoint privilege management (least‑privilege, privilege elevation, application control).
- Strong knowledge of MFA, SSO, passwordless, Kerberos, certificate‑based authentication.
- Familiarity with NIST 800‑63B, Zero‑Trust frameworks, ITDR, CIS/CSA cloud security standards.
- Scripting/automation: PowerShell, Python, Bash, Terraform (or similar).
- Excellent documentation and communication skills.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Preferred certifications: CISSP, CISM, CCSP, Azure Security Engineer Associate, AWS Security Specialty, GIAC, SailPoint, or similar.
New york city, United states
On site
Senior
20-01-2026