Apply on Employer Site

Ad Hoc LLC · 1 day ago

Evergreen: Cybersecurity & Identity Automation Engineer

United States

Full-time

Remote

Director/Executive

10+ years exp

Ad Hoc LLC is a technology company that empowers organizations to deliver scalable, impactful digital services. They are seeking a Cybersecurity & Identity Automation Engineer who will manage team operations and serve as a subject matter expert in the Security and Compliance discipline, ensuring compliance and implementing automated security solutions.

ComputerData ManagementSoftware

Culture & Values

Responsibilities

Automate Identity and Access Management (IAM) and Privileged Access Management (PAM) workflows across the enterprise using dedicated security tools

Implementing automated entitlement provisioning and JML (Joiner-Mover-Leaver) workflows in SailPoint

Automating privileged account onboarding/offboarding in CyberArk. Defining RBAC models

Configuring Network ACLs, firewalls, and security groups to enforce policy and isolate sensitive workloads

Design secure network infrastructure enforcing Zero Trust principles for the DXP

Ensure 100% compliance with IRS/NIST boundary protection standards

Manages the security of information resources for the company and customer assets for which it is responsible

Ensures optimal return on investment on security-related decisions

Keeps ahead of the threat landscape and prepares the organization to proactively react to these threats

Educates the company on industry security standards and ensures compliance

Advises company executive-level leadership on how business decisions affect its security posture

Meets with external parties as needed to represent company interests in security-related matters

Leads initiatives and fosters a culture that drives the importance and value of security

Works across the organization with leaders to educate on security gaps and coordinate on improvement efforts

Articulates a forward-thinking vision for security and compliance and executes a roadmap to evolve new capabilities and approaches to meet it

Implements frameworks and processes that help teams learn, build, measure, and evolve

Leads the senior security and compliance leadership team to meet expectations for delivery excellence

Ensures security and compliance team members have clear pathways for growth and that support systems scale

Identifies organizational roadblocks inhibiting success, delivering on initiatives that support operational needs in partnership with other groups in the organization

Supports growth efforts, ensuring capabilities and interests of security and compliance align with the business

Exhibits executive communication skills, with the ability to clearly articulate business and practice initiatives, goals and strategies

Responsible for budget planning and management for their respective department

Qualification

CybersecurityIdentity Access ManagementPrivileged Access ManagementPeople ManagementSailPointCyberArkNetwork SecurityNIST CompliancePythonGoSecurity CertificationsExecutive Communication

Required

Bachelor's degree in computer science, information assurance, cybersecurity or related field

10+ years of experience (relevant years of experience may be substituted for education)

6+ years of people management experience, responsible for defining expectations for team operations and performance management

7+ years experience directing assignments for cross-functional team

At least 10+ years experience in cybersecurity as a practitioner

At least 8+ years of exposure to various security frameworks

Expert knowledge of audit methodologies and standard deliverables

CompTIA Sec+ and CISSP or CISM required

CRISC or additional security certifications are recommended

Preferred

Deep expertise in IAM/PAM solutions and identity lifecycle management

Proficiency in scripting and integrating security tools via APIs

Strong understanding of network security, FISMA/NIST compliance, and Zero Trust architecture

SailPoint, CyberArk, Active Directory (AD), Python/Go (for automation/scripting), NIST 800-53/RMF, Security Information and Event Management (SIEM) tools (e.g., Splunk, Datadog), Terraform (for network security group management)