Senior Cybersecurity Engineer, Identity & Access Management

Location: El Segundo, California, United States; onsite

Base salary: $140,000–$200,000 per year

Company

hirify.global develops defense and aerospace products powered by Coherent Distributed Networks for warfighters, commercial air operators, and border protection teams.

What you will do

• Design, build, and maintain identity architecture and role-based access control across cloud and on-premises directory services.
• Own and automate IAM workflows for onboarding, role changes, and offboarding across identity, directory, cloud, and secrets platforms.
• Design authentication policies, conditional access, phishing-resistant MFA, device compliance controls, and privileged access models.
• Build identity-focused detections and threat hunts in SIEM, EDR, and SOAR tools and support identity-related security investigations.
• Administer privileged identity management, password and secrets management, Active Directory security, cloud IAM, and application SSO integrations.
• Run access reviews and produce compliance evidence for NIST SP 800-171 access control and identification and authentication requirements.

Requirements

• Bachelor’s degree or equivalent experience with 5+ years of progressively responsible cybersecurity engineering experience, or a master’s degree with 3+ years of relevant experience.
• At least two years of IAM experience, including production IdP administration and hands-on administration of Entra ID or Active Directory.
• Experience with JML provisioning and deprovisioning, authentication policies, and phishing-resistant MFA deployment.
• Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Scripting experience with PowerShell, Python, or a comparable language, including identity provider APIs.
• Knowledge of Zero Trust Architecture and NIST SP 800-171 or NIST SP 800-53, plus experience producing compliance evidence.

Nice to have

• Experience with Azure or AWS IAM, enterprise password and secrets management, identity automation, PIM, PAWs, or tiered administration.
• Experience with Microsoft 365 GCC High or another US government cloud environment and the Defense Industrial Base.
• Experience with Active Directory attack path analysis tools, query languages, certificate-based authentication, or FIDO2 security keys.
• SC-300, CISSP, or another relevant certification.

Culture & Benefits

• Medical, dental, and vision insurance fully paid by the company.
• 401(k) with a 50% company match up to 6% of pay, plus FSA, HSA, and life insurance.
• Free daily lunch while working onsite and a fully stocked kitchen.
• Unlimited PTO and a casual dress code.
• Relocation assistance, pre-IPO stock options, and annual bonuses planned for the future.