Note: The job is a remote job and is open to candidates in USA. Beacon Hill is seeking a Senior Authentication / Identity Security Engineer to design, implement, and enhance enterprise authentication and identity security platforms. The role focuses on Microsoft Entra ID, Active Directory, AI identity management, and non-human identity security, while providing technical leadership and improving platform reliability.

Responsibilities

• Design, implement, and enhance enterprise authentication and identity security solutions
• Engineer and support Microsoft Entra ID and Active Directory environments
• Support AI Identity Management and Non-Human Identity (NHI) security initiatives
• Lead authentication-related projects, including password security and NHI observability
• Establish engineering standards and improve platform security, performance, scalability, and reliability
• Provide technical leadership and mentorship to other engineers
• Collaborate with security, infrastructure, and engineering teams on identity architecture and platform improvements

Skills

• 6+ years of hands-on experience in IAM, authentication engineering, identity security, or related security engineering
• Microsoft Entra ID (Azure AD) - Strong hands-on experience with enterprise authentication, identity security, and platform engineering
• Active Directory - Deep expertise in AD administration, authentication, security, and hybrid identity environments
• AI Identity Management - Experience securing and managing AI-related identities, agents, or automated workloads
• Non-Human Identity (NHI) - Experience managing or securing service accounts, service principals, managed identities, or workload identities
• Authentication Engineering - Strong understanding of authentication protocols, identity federation, access controls, and security best practices
• Security Architecture & Engineering - Experience designing, implementing, and supporting secure, scalable enterprise identity platforms
• Technical Leadership - Ability to lead complex engineering initiatives, establish technical standards, mentor engineers, and collaborate across teams
• Strong troubleshooting, problem-solving, and communication skills
• Bachelor's degree or equivalent practical experience
• AWS IAM Identity Center (AWS SSO)
• SailPoint Identity Security Cloud (ISC)
• Experience owning enterprise identity platforms or leading major security initiatives
• Cloud security, identity, or automation certifications

Benefits

• 100% remote position; candidates will be working on Arizona Timezone.
• Medical, dental, and vision benefits for those that meet eligibility.
• Federal and state leave programs as required by applicable agency regulations, for those that meet eligibility.

Company Overview