Senior Cybersecurity Engineer (IAM & Endpoint Security)

Job description

This role combines hands-on engineering expertise with architectural alignment, focusing on scalable, automated, and risk-informed solutions grounded in Zero Trust principles.

Key ResponsibilitiesLead the implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.Own identity lifecycle management, endpoint security, and access governance, ensuring secure configurations and consistent enforcement of standards.Drive automation and operational efficiency across provisioning, compliance, and access management processes.Apply Zero Trust principles and threat modeling to strengthen identity and endpoint security design.Partner with Cyber Operations to enhance detection, response, and control monitoring capabilities.Conduct risk assessments and control validation, focusing on identity compromise and endpoint threats.Collaborate with global teams and mentor engineers to promote consistent, scalable security practices.Qualifications and Experience8+ years of experience in cybersecurity engineering.Strong hands-on expertise in IAM, endpoint security, and privileged access management.Experience in hybrid environments (on-premises and cloud).Ability to translate architectural principles into practical engineering solutions.Preferred Certifications: CISSP, CISM, or equivalent.Technical ExpertiseIdentity and Access Management (authentication, authorization, federation, governance)Privileged Access Management and least privilege enforcementEndpoint security, hardening, and threat detection/responseDevice management and endpoint complianceZero Trust architecture and identity-centric security modelsThreat modeling and risk-based security practicesAutomation/scripting for security operationsFamiliarity with NIST, ISO, and CIS frameworksCore CompetenciesTechnical leadership and hands-on problem solvingRisk-based decision makingCollaboration across global teamsClear and effective communicationValues & CultureActs with non-negotiable integrity and maintains the highest professional standards.Demonstrates intellectual curiosity, seeking to continually advance the firm s cybersecurity engineering posture.Embodies collaboration, transparency, and accountability in all engagements.Dedicated to protecting client trust through security excellence and proactive risk management.Special RequirementsHybrid work model (4 days onsite preferred)Occasional after-hours support for global operations