Cybersecurity Engineer - IAM & Endpoint Security
Job Description
Our client, based in New York, NY, is looking to hire a Cybersecurity Engineer – IAM & Endpoint Security.
\n
\n
I have listed below a detailed job description for your review.
\n
\n
If you have the required experience and interest, please email me a current resume, along with your responses to the following questions:
\n
\n
*** How much experience in years do you have with cybersecurity engineering?
\n
\n
*** How much experience in years do you have with IAM?
\n
\n
*** How much experience in years do you have with Endpoint Security?
\n
\n
*** How much experience in years do you have with Privileged Access Management?
\n
\n
*** How much experience in years do you have with hybrid environments (on-premises and cloud)?
\n
\n
*** What IT security certifications do you hold (CISSP, CISP, etc…)?
\n
\n
*** What is your visa status (US Citizen, Greencard Holder, H1-b, etc.)?
\n
\n
*** What is your desired salary?
\n
\n
*** Where do you currently reside (city, state)?
\n
\n
*** Are you able to work in New York, NY?
\n
\n
*** What is your availability to start a new position?
\n
\n
Thank you!
\n
\n
Steven Edelman
\n
Pivotal Solutions, Inc.
\n
516-472-0749
\n
\n
\n
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
\n
\n
Job Description:
\n
\n
Our client is seeking a Cybersecurity Engineer – IAM & Endpoint Security to lead the design and engineering of identity, endpoint, and privileged access security capabilities across a global hybrid environment.
\n
This role combines hands-on engineering expertise with architectural alignment, focusing on scalable, automated, and risk-informed solutions grounded in Zero Trust principles.
\n
\n
Key Responsibilities
\n
- \n
- Lead the implementation and optimization of identity, endpoint, and privileged access controls across hybrid environments.
- Own identity lifecycle management, endpoint security, and access governance, ensuring secure configurations and consistent enforcement of standards.
- Drive automation and operational efficiency across provisioning, compliance, and access management processes.
- Apply Zero Trust principles and threat modeling to strengthen identity and endpoint security design.
- Partner with Cyber Operations to enhance detection, response, and control monitoring capabilities.
- Conduct risk assessments and control validation, focusing on identity compromise and endpoint threats.
- Collaborate with global teams and mentor engineers to promote consistent, scalable security practices.
\n
\n
\n
\n
\n
\n
\n
\n
\n
Qualifications and Experience
\n
- \n
- 7+ years of experience in cybersecurity engineering.
- Strong hands-on expertise in IAM, endpoint security, and privileged access management.
- Experience in hybrid environments (on-premises and cloud).
- Ability to translate architectural principles into practical engineering solutions.
- Preferred Certifications: CISSP, CISM, or equivalent.
\n
\n
\n
\n
\n
\n
\n
Technical Expertise
\n
- \n
- Identity and Access Management (authentication, authorization, federation, governance)
- Privileged Access Management and least privilege enforcement
- Endpoint security, hardening, and threat detection/response
- Device management and endpoint compliance
- Zero Trust architecture and identity-centric security models
- Threat modeling and risk-based security practices
- Automation/scripting for security operations
- Familiarity with NIST, ISO, and CIS frameworks
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Core Competencies
\n
- \n
- Technical leadership and hands-on problem solving
- Risk-based decision making
- Collaboration across global teams
- Clear and effective communication
\n
\n
\n
\n
\n
\n
Values & Culture
\n
- \n
- Acts with non-negotiable integrity and maintains the highest professional standards.
- Demonstrates intellectual curiosity, seeking to continually advance the firm’s cybersecurity engineering posture.
- Embodies collaboration, transparency, and accountability in all engagements.
- Dedicated to protecting client trust through security excellence and proactive risk management.
\n
\n
\n
\n
\n
\n
Special Requirements
\n
- \n
- Hybrid work model (4 days onsite preferred)
- Occasional after-hours support for global operations
\n
\n
\n