Senior Security Engineer - Identity

Salary: $80,000 - 104,000 per year Requirements:

• Bachelors degree in Information Technology, Cybersecurity, Computer Science, Engineering, or equivalent practical experience.
• 7+ years of hands-on experience in Identity and Access Management, Cybersecurity Engineering, Infrastructure Engineering, or Cloud Security.
• 5+ years of direct experience managing non-human identities, service accounts, application identities, workload identities, or machine authentication technologies.
• Strong practical experience administering Microsoft Entra ID, Active Directory, or comparable identity platforms.
• Experience implementing and supporting secrets management, credential vaulting, and privileged access solutions.
• Strong scripting and automation skills with PowerShell, Python, Bash, or similar tools.
• Experience with OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP, certificates, and PKI technologies.
• Experience supporting Azure, AWS, Google Cloud, or multi-cloud environments.
• Ability to analyze logs, troubleshoot authentication failures, and resolve complex identity-related issues.
• Experience working within enterprise change management, incident management, and operational support processes.
• Strong verbal and written communication skills with the ability to collaborate across technical teams.
• Hands-on experience with CyberArk, HashiCorp Vault, Delinea, BeyondTrust, SailPoint, Microsoft Entra Workload Identities, or similar platforms.
• Experience managing certificate lifecycles and public/private key infrastructure.
• Experience securing Kubernetes, containers, microservices, and cloud-native applications.
• Familiarity with Infrastructure as Code tools such as Terraform, Bicep, ARM, or CloudFormation.
• Experience with SIEM platforms and identity security monitoring.
• CISSP, CISM, Security+, Microsoft Identity and Access Administrator, CyberArk Defender/Sentry, or related certifications.
• Candidates within commuting distance of the Tempe, AZ and St. Louis, MO home office locations are expected to work onsite four days per week beginning June 1, 2026, and three days per week before that date, with preference for Tuesday through Thursday.

• Engineer, implement, and support enterprise non-human identity solutions across cloud, on-premises, and hybrid environments.
• Develop and maintain automated provisioning, credential rotation, secret management, certificate lifecycle management, and deprovisioning processes.
• Perform onboarding and migration of service accounts, managed identities, workload identities, application accounts, and machine credentials into enterprise identity management platforms.
• Configure, deploy, and support privileged access controls for non-human identities using PAM and secrets management technologies.
• Work directly with development, application, and infrastructure teams to eliminate hardcoded credentials and replace legacy authentication methods with modern identity solutions.
• Design, build, and maintain automation using PowerShell, Python, REST APIs, Terraform, and other scripting or orchestration technologies.
• Integrate identity controls into CI/CD pipelines and DevSecOps workflows.
• Troubleshoot and resolve authentication, authorization, federation, certificate, token, and credential-related issues across enterprise applications.
• Support large-scale remediation efforts involving dormant service accounts, excessive permissions, unmanaged secrets, and identity-related security vulnerabilities.
• Configure and administer identity platforms, including directory services, cloud identity providers, PAM solutions, certificate authorities, and secrets vaults.
• Monitor non-human identity activity and investigate suspicious authentication events, credential misuse, or policy violations.
• Conduct access reviews and entitlement analysis to ensure least-privilege principles are maintained.
• Create operational runbooks, implementation guides, engineering standards, and technical documentation.
• Partner with Security Operations and Incident Response teams during investigations involving machine identities and application credentials.
• Participate in after-hours support, major incident response, and maintenance activities when required.

• ARM
• AWS
• Active Directory
• Azure
• Bash
• CI/CD
• Cloud
• DevSecOps
• Incident Management
• Support
• Kubernetes
• LDAP
• OAuth
• OpenID
• PowerShell
• Python
• REST
• SAML
• Security
• Sentry
• Terraform
• microservices
• API
• DevOps
• IAM

More:

We are Edward Jones, a privately owned Fortune 500 financial services firm with more than 9 million clients and 20,000 financial advisors across the U.S. and Canada. Our purpose is to partner for positive impact, improving the lives of our clients and colleagues and strengthening our communities and society. We are an innovative, flexible, and inclusive organization where people come first and associates are seen, heard, respected, and supported. This Senior Non-Human Identity Engineer role is a highly technical, hands-on position focused on the engineering, automation, onboarding, remediation, and operational management of non-human identities across the enterprise. We support cloud, on-premises, and hybrid environments and value strong execution, collaboration, and problem-solving. We also offer a comprehensive compensation and benefits package that includes medical, dental, vision, disability, life, retirement, tax-advantaged accounts, paid holidays, vacation, sick time, personal days, volunteer time, bonus and profit-sharing eligibility, and an employee assistance program. We are building a workplace where everyone feels they belong, and this position may require regular in-office presence for associates within commuting distance of our Tempe, AZ and St. Louis, MO home office locations.

last updated 36 week of 2026