Senior Identity Security Engineer (Remote - LATAM)
Posted 3
views
Summary
Contractor role that leads the design, security, and modernization of hybrid identity platforms built on Active Directory and Microsoft Entra ID — remediating privileged access risk, implementing governance (JML, access reviews), and configuring Defender for Identity, Sentinel, and modern auth (SAML/OIDC/SCIM) to support Zero Trust. Fully remote within LATAM, with possible client-site travel.
Atmosera empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility. As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), Atmosera expertly delivers cutting-edge, integrated solutions that deliver business value.
The Senior Identity Security Engineer will lead the design, security, and modernization of the organization's identity platform across Active Directory, Microsoft Entra ID, and cloud security services. This role is responsible for strengthening identity security, reducing legacy authentication risk, improving governance, and supporting Zero Trust initiatives across hybrid environments. The position requires deep technical expertise, strong problem-solving skills, and the ability to translate security requirements into scalable identity solutions.
Key Responsibilities
- Design, secure, and optimize hybrid Active Directory and Microsoft Entra ID environments.
- Assess and remediate identity security risks, privileged access issues, and authentication vulnerabilities.
- Lead modernization initiatives involving NTLM, Kerberos, Conditional Access, SAML, OIDC, and SCIM.
- Implement and support identity governance processes, including Joiner-Mover-Leaver (JML), entitlement management, and access reviews.
- Configure and integrate Microsoft security technologies including Defender for Identity, Sentinel, and Identity Protection.
- Develop identity security standards, roadmaps, and technical recommendations.
- Collaborate with infrastructure, security, and application teams to improve identity architecture and operational maturity.
- Support audits, compliance initiatives, and security assessments.
Required Qualifications
- 5+ years of Identity and Access Management (IAM) experience.
- Strong experience with:
- Active Directory
- Microsoft Entra ID (Azure AD)
- Hybrid Identity
- Conditional Access
- Privileged Identity Management (PIM)
- Microsoft Defender for Identity
- Microsoft Sentinel
- Experience with modern authentication protocols including SAML, OAuth, OpenID Connect, and SCIM.
- Strong PowerShell scripting and automation skills.
- Experience implementing identity governance and privileged access controls.
- Understanding of Zero Trust security principles and Microsoft security best practices.
Preferred Qualifications
- Microsoft Certifications (SC-300, SC-200, AZ-500, SC-100)
- CISSP or equivalent security certification
- Experience with Microsoft Purview, CyberArk, SailPoint, or Okta
- Experience supporting enterprise security and compliance initiatives
This is a contractor position with the ability to work from home but may require travel to a client site.
Atmosera is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. All employment is decided on the basis of qualifications, merit, and business need.
Skills
As published by lever · 8 questions · 1 written answer
Basics
Which location are you applying for?, Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL
Short answers (1)
- As a Contractor...What is your expected hourly, OR monthly rate, in USD?
Pick from a list (6)
- Are you currently authorized to work legally in your current country of residence?
- Will you now or in the future require employer-sponsored work authorization to work in your country of residence?
- If hired as a contractor, are you registered with local tax authorities to provide professional services and issue legal invoices (e.g., SAT in Mexico, Hacienda in Costa Rica)?
- If hired, can you confirm that you will continue residing and working from a location where our company is legally able to employ or contract talent?
- Do you have hands-on experience with Microsoft Sentinel, Defender XDR, and KQL for security investigations?
- Do you possess an active Microsoft SC-200 certification?
Written answers (1)
- Please describe your experience working with Microsoft Entra ID and Identity Governance (Conditional Access, PIM, RBAC, or Access Reviews)?