Identity Security Engineer

Janus Henderson Investors•Denver, CO

1d•$90,000 - $100,000•Hybrid

About The Position

The Identity Security Engineer is a hands-on security engineering role focused on securing privileged access and identities across JHI. The role is primarily responsible for designing, implementing, and operating Privileged Access Management (PAM) controls, ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle. In addition, the engineer will support identity threat detection and response capabilities, investigate identity-related security events, maintain data access governance tooling, and develop security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk.

Requirements

Strong understanding of Privileged Access Management (PAM) principles, including least privilege, just-in-time access, ephemeral access, privileged session management, secrets management, and credential vaulting.
Ability to investigate, triage, and resolve PAM and identity-related incidents, requests, and operational issues while driving root-cause remediation.
Experience administering and engineering enterprise PAM platforms such as Britive, CyberArk, Delinea, or equivalent.
Experience designing, implementing, and operating privileged access controls across on-premise and cloud environments.
Experience onboarding and governing privileged users, service accounts, machine identities, APIs, workload identities, and other non-human identities throughout their lifecycle.
Experience securing and managing privileged access for automation platforms, cloud workloads, DevOps tooling, and emerging AI/agentic systems.
Experience configuring and maintaining identity security and data access governance platforms, including Active Directory/Entra ID auditing, permissions analysis, access monitoring, and security reporting.
Strong understanding of Identity Access Governance (IAG) concepts and integrations between PAM, IAG, and ITSM platforms, such as SailPoint Identity Security Cloud (ISC) and ServiceNow, with experience supporting identity lifecycle management, provisioning workflows, and troubleshooting workflow issues.
Experience working with Active Directory, Entra ID, federation, authentication, access control, and modern identity security architectures.
Experience developing security metrics, KPIs, dashboards, and reporting that measure control effectiveness, operational performance, adoption, and risk reduction in an automated manner.

Nice To Haves

Experience with Identity Threat Detection & Response (ITDR) and identity-centric threat monitoring.
Experience with User and Entity Behaviour Analytics (UEBA) platforms.
Experience creating, tuning, or maintaining identity-focused detections, analytics, and use cases within a SIEM platform.
Understanding of identity-focused attack techniques including account compromise, privilege escalation, credential theft, lateral movement, and insider threats.
PowerShell and/or Python scripting experience for automation and operational efficiency.
Experience integrating identity platforms with SIEM, SOAR, and security operations tooling.
Experience monitoring and securing non-human identities, machine identities, and AI agents.
Knowledge of AI agent security, non-human identity governance, MCP security, delegated permissions, workload identities, and AI-related identity threats.

Responsibilities

Designing, implementing, and operating Privileged Access Management (PAM) controls.
Ensuring privileged users, service accounts, machine identities, APIs, and emerging AI agents are securely managed throughout their lifecycle.
Supporting identity threat detection and response capabilities.
Investigating identity-related security events.
Maintaining data access governance tooling.
Developing security metrics and automation that strengthen JHI's overall identity security posture and reduce operational risk.

Benefits

Hybrid working and reasonable accommodations
Generous Holiday policies
Excellent Health and Wellbeing benefits including corporate membership to Wellhub
Paid volunteer time to step away from your desk and into the community
Support to grow through professional development courses, tuition/qualification reimbursement and more
Maternal/paternal leave benefits and family services
Unique employee events and programs including a 14er challenge
Complimentary beverages, snacks and all employee Happy Hours
Annual Bonus Opportunity
Competitive compensation
Pension/retirement plans
Various health, wellbeing and lifestyle benefits