Identity Security Engineer

ECS Tech Inc•Washington, DC

2d•$120,000 - $130,000

About The Position

Everforth ECS is seeking a technically experienced Identity Security Engineer for its security operations division, a full-spectrum cybersecurity organization covering endpoint security, event monitoring, threat intelligence, and advanced incident response. This is a security engineering role focused on designing, hardening, and evolving identity systems rather than simply administering them. The role combines identity security and Windows server infrastructure. The engineer will assess identity architecture against modern security frameworks, lead initiatives to reduce identity-based risk, and ensure the Windows server environment supporting identity systems is configured, documented, and defended to a high standard. The position requires treating identity as a primary security control and applying both engineering depth and strategic thinking. The role is based in the Washington, DC office or remote and is contingent upon additional funding.

Requirements

At least 5 years of progressive experience in identity security and Windows Server administration.
Demonstrated experience operating at an engineering level rather than solely in operational or support roles.
Deep understanding of enterprise identity and access management (IAM) architecture, governance, and security operations.
Experience integrating identity signals into security operations, including identity protection, threat detection, and centralized logging.
Ability to monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks.
Hands-on experience with Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), and just-in-time access controls.
Experience enforcing least privilege and role-based access control (RBAC), and automating access provisioning and deprovisioning workflows.
Familiarity with Zero Trust identity principles and ability to assess and mature an organization's identity posture against them.
Experience securing workload identities, service principals, and high-risk administrative accounts.
Ability to decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication.
Strong experience administering and hardening Windows Server environments in an enterprise setting.
Proficiency with Microsoft Active Directory, Active Directory Federation Services, and Group Policy Objects (GPOs) from a security engineering perspective.
Ability to monitor and analyze Windows-based architecture, communication, policies, and protocols from a cybersecurity perspective.
Experience with system monitoring, log review, and corrective actions to maintain server integrity and availability.
Ability to create and maintain thorough system installation, configuration, and troubleshooting documentation.
Experience supporting security continuous monitoring efforts, risk assessments, and system patching within Windows server environments.
Ability to identify security gaps and recommend technical and process-level improvements.
Experience developing or contributing to technical security standards, monitoring standards, and security architecture documentation.
Ability to work across cybersecurity, networking, systems administration, and technology support teams.
Ability to communicate findings and risks clearly to technical peers and senior leadership.

Nice To Haves

Hands-on Zero Trust identity implementation experience.

Responsibilities

Assess the organization's identity architecture against modern security frameworks and Zero Trust principles.
Lead initiatives to reduce identity-based risk and mature the organization's identity posture.
Integrate identity signals into security operations, including identity protection, threat detection, and centralized logging.
Monitor identity health, detect suspicious activity, and investigate identity-based threats using security analytics and operational playbooks.
Enforce least privilege and role-based access control, and automate access provisioning and deprovisioning workflows.
Secure workload identities, service principals, and high-risk administrative accounts.
Decommission legacy federation infrastructure and migrate applications to modern, standards-based authentication.
Administer, monitor, and harden enterprise Windows Server environments and supporting identity systems.
Review Windows system logs and take corrective action to maintain server integrity and availability.
Create and maintain system documentation covering installation, configuration, and troubleshooting procedures.
Support security continuous monitoring, risk assessments, and system patching in Windows server environments.
Identify gaps in identity and server security capabilities and recommend technical and process-level improvements.
Develop and contribute to technical security standards, monitoring standards, and security architecture documentation.
Collaborate with cybersecurity, networking, systems administration, and technology support teams.
Communicate findings and risks to technical peers and senior leadership.