ECCO Select is a talent acquisition and consulting company specializing in people, process and technology solutions. We provide the talent behind the technology enabling our clients to achieve their goals. For more information about ECCO Select, visit us at www.eccoselect.com.

Position Title:     Identity & Access Management Engineer

Location Information  

Remote

Position Responsibilities:

As an Identity & Access Management Engineer, you will play a pivotal role in designing, implementing, and managing enterprise identity solutions while supporting the protection of digital identity perimeters. Collaborating closely with security, IT, and application teams, you will help reduce identity risk and ensure access controls are robust, adaptive, and aligned with zero trust principles. Key responsibilities include:

Ping Identity:
• Deploy, configure, and maintain Ping Identity components such as PingFederate, PingAccess, and PingDirectory.
• Design and implement federated single sign-on, multi-factor authentication, and adaptive authentication flows for enterprise-wide use.
• Oversee API security and manage OAuth and OpenID Connect integrations within various enterprise applications.
• Conduct platform upgrades, patching, and performance tuning in production environments.
• Create and maintain custom integration connectors and sophisticated authentication policies.

Active Directory & Entra ID:
• Administer and manage both on-premises Active Directory and Microsoft Entra ID environments.
• Design and enforce group policies, organizational unit structures, and privileged access controls.
• Monitor Active Directory health, ensure effective replication, and regularly audit logs.
• Identify and remediate directory security gaps and misconfigurations.
• Support hybrid identity environments, enabling directory synchronization and conditional access.
• Participate in security assessments and remediation activities focused on identity risks.

CrowdStrike Identity Protect:
• Deploy and configure CrowdStrike Falcon Identity Threat Protection tools.
• Develop detection rules and response playbooks to protect against identity-based threats.
• Integrate identity protection solutions with Active Directory, Entra ID, and other security platforms.
• Tune identity risk scoring and improve detection capabilities.
• Partner with security operations to triage and respond to identity-related security incidents.

Essential Skills, Experience

• Minimum of four (4) years of hands-on experience in identity and access management engineering.
• Proficiency with at least two platforms, such as Ping Identity, Active Directory, or Microsoft Entra ID.
• Strong knowledge of modern identity protocols, including SAML, OAuth 2.0, OpenID Connect, Kerberos, and LDAP.
• Experience with identity threat detection platforms such as CrowdStrike or similar solutions.
• Solid working knowledge of zero trust principles and privileged access management concepts.
• Skilled in PowerShell for scripting and process automation.
• Ability to collaborate effectively with cross-functional teams (security, IT, and application groups).

Qualifications:

• Ping Identity certification (e.g., Ping Certified Identity Professional) is preferred.
• Microsoft Identity and Access Administrator certification is a plus.
• Experience with privileged access management platforms (e.g., CyberArk, BeyondTrust) is desirable.
• Experience with identity governance platforms such as SailPoint or Saviynt is advantageous.
• Familiarity with digital identity standards and zero trust architectures is beneficial.
• Prior experience working in regulated industries (e.g., energy, utilities, financial services) is a plus.

Tools and Technologies: PingFederate, PingAccess, PingDirectory, Microsoft Active Directory, Microsoft Entra ID, CrowdStrike Falcon Identity Threat Protection, PowerShell, OAuth, OpenID Connect, SAML, Kerberos, LDAP

ECCO Select is committed to hiring and retaining a diverse workforce. Our policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Veterans of our United States Uniformed Services are specifically encouraged to apply for ECCO Select opportunities.

Equal Employment Opportunity is The Law
This Organization Participates in E-Verify