Senior Security Engineer.

Location: #New_York, #Baltimore.
Salary: $150,000 - 170,000.
Employer: Nexxen.

Responsibilities:
• Define the roadmap for identity consolidation, PAM rollout, and data security maturity;
• Establish identity/data control baselines, operational runbooks, and measurable SLAs;
• Product, delivery, and value realization;
• Deliver Azure AD consolidation, Conditional Access, MFA, PIM, and Azure AD/AWS SSO integration;
• Implement PAM (CyberArk or Delinea) with JIT/JEA, session recording, and break-glass procedures;
• Operationalize access reviews and automate provisioning/deprovisioning and entitlement workflows;
• Harden AWS orgs across ~30 accounts with SCPs, permission boundaries, and account vending patterns;
• Standardize data discovery/classification, retention, encryption, key management, and tokenization across platforms;
• Integrate Apono for database access governance; enforce auditable, least-privilege access;
• Monitor identity and data compliance; apply AI-driven anomaly detection to reduce dwell time;
• Partner with Compliance on evidence automation and control mapping for SOC 2/SOX/GDPR;
• Support incident response for identity/data events; contribute to post-incident improvements;
• Enable Security Champions across engineering; deliver training and self-service, secure access workflows;
• Partner cross-functionally with IT, Infrastructure, DB, and Data Engineering to scale operational adoption.

Requirements:
• 6–10+ years in Identity and Data Security within enterprise and cloud-native environments;
• Hands-on expertise with: Azure AD/Entra ID, Conditional Access, MFA, PIM; SCIM, OIDC, SAML; Okta or AWS IAM Identity Center;
• PAM (CyberArk/Delinea); privileged workflows, credential rotation, and session recording;
• AWS IAM at scale (Organizations, Control Tower, SCPs, Access Analyzer); GuardDuty, Security Hub, Macie; KMS/HSM; CloudTrail/Config;
• Data security: Microsoft Purview (classification/DLP), envelope encryption, S3/KMS policies, tokenization;
• Automation: PowerShell, Python, Terraform; Graph API, AWS SDK; Step Functions/Lambda for access workflows;
• Databases: PostgreSQL/Aurora/RDS hardening; short-lived credentials; auditable RBAC/ABAC;
• Proven delivery of identity consolidation, access review automation, and data lifecycle programs;
• Collaborative communicator with strong stakeholder influence;
• Analytical, detail-oriented, and automation-first mindset;
• Ability to manage competing priorities and drive closure on complex issues.

⚡ %contact_placeholder%

#Офис #ИБ