A hands-on technical leadership role responsible for designing, implementing, and supporting core infrastructure, cloud services, and modern workplace environment for a growing international organization.
Responsibilities
Own the technical direction, design, implementation, and ongoing improvement of the organization’s IT infrastructure, cloud services, and modern workplace environment.
Act as technical lead for Microsoft 365, including Entra ID, Intune, Microsoft Defender, Exchange Online, SharePoint Online, Teams, OneDrive, and related services.
Design and maintain secure, standardized endpoint management solutions for Windows, macOS, and iOS, including configuration, compliance, application deployment, patching, and device lifecycle management.
Lead identity and access management practices, including SSO, MFA, Conditional Access, passwordless authentication, privileged access, and joiner-mover-leaver controls.
Serve as the primary technical relationship owner for the company’s CSP, coordinating Level 2 and higher support, escalations, service reviews, root-cause analysis, and continuous service improvement.
The Cybersecurity Analyst supports BRG’s daily security operations across cloud, identity, email, data, and endpoint environments.
Compensation
Salary Range: $90,000-$120,000
Responsibilities
Monitor, triage, investigate, document, and coordinate response to security alerts, incidents, tickets, and suspicious activity across Microsoft and third-party security platforms.
Work with BRG’s managed security provider to investigate alerts, validate activity, track remediation, and improve alert quality and operational workflows.
Administer and support Microsoft security capabilities across Azure, Microsoft Entra ID, Active Directory, Microsoft Defender, Defender for Cloud, Sentinel, and Microsoft Purview.
Review Azure security recommendations, policies, and configuration findings; help test, document, and implement Azure Policy initiatives, security baselines, and control exceptions.
Support identity security operations, including Conditional Access, privileged access and PIM reviews, role lifecycle activities, stale-account cleanup, authentication controls, service accounts, guest access, and privileged-group monitoring.
Requirements
Nice to have: Microsoft Certified: Security Operations Analyst Associate (SC-200)
Principal Customer Identity Access Management (CIAM) Architect responsible for technical architecture and strategic leadership of Citizens' CIAM platform.
Systems Administrator (IAM Engineer) responsible for lifecycle, security, and governance of user identities and access across Second Sight’s Microsoft Entra ID–centered environment.
Compensation
Salary range: $115,000 - $125,000
Responsibilities
Own the end-to-end joiner, mover, and leaver process for employees and contractors in Microsoft Entra ID
Administer Microsoft Entra ID users, security, and Microsoft 365 groups
Manage user access across the software systems used within Second Sight
Coordinate with Governance, Risk and Compliance (GRC), HR, department managers, and application owners to define role-based access models
Design, implement, and maintain Conditional Access policies
Requirements
Bachelor's degree in a related field
Nice to have: Apple Certified Support Professional (ACSP)
Nice to have: Apple Certified Mac Technician (ACMT)
Lead and accelerate commercial growth across a defined set of target verticals and the broader Western United States for a high-growth identity security platform.
Compensation
Competitive Base + Commission + Equity $325K–$350K OTE
Responsibilities
Own a combination territory of 1-2 target verticals and the Western United States geography
Build and execute a territory plan prioritizing account targeting, whitespace mapping, and partner coverage
Generate pipeline through direct outreach, partner co-sell motions, industry events, and referral networks
Develop and maintain a qualified pipeline to support quarterly and annual revenue targets
Identify and pursue whitespace opportunities across the full 1Kosmos use case portfolio
Lead and architect corporate security for Nexthink’s internal environment, ensuring secure identity, device, and application management across a global SaaS ecosystem.
Locations (2)
Bengaluru, Karnataka, India
Madrid, Madrid, Spain
Compensation
💼 Permanent Contract and a competitive compensation package.
Responsibilities
Architect security fabric for rapid growth
Design and implement passwordless authentication and Zero Trust principles
Manage secure provisioning and lifecycle management
Streamline onboarding/offboarding workflows
Define and enforce security baselines for endpoints
Requirements
Nice to have: FIDO2/WebAuthn
Nice to have: Compliance standards (ISO 27001/27701, SOC 2, FedRAMP)
Nice to have: Phishing simulation tools
Nice to have: Security awareness training platforms
Lead the design, implementation, and optimization of enterprise identity and access solutions, ensuring seamless integration across cloud, SaaS, and on-prem systems.
Locations (2)
Spain
Madrid, Madrid, Spain
Responsibilities
Identity & Access Architecture Design and implement a scalable IAM architecture utilizing Microsoft Entra ID, Entra B2C, and other identity platforms.
Lead integration efforts across SAP, Workday, SaaS applications, and custom-built platforms.
Define IAM governance models, including role-based access control (RBAC), attribute-based access control (ABAC), and just-in-time (JIT) access.
Support the adoption of zero-trust identity principles, including MFA, conditional access, and passwordless authentication.
Architect identity lifecycle management solutions, automating provisioning/deprovisioning across HR, IT, and security systems.
The salary range for this position is $170,000 to $210,000 per year, plus an opportunity to earn additional incentive earnings.
Responsibilities
Define and evolve the target state architecture for Citizens' Customer Identity and Authentication ecosystem.
Establish enterprise architecture patterns and technical standards for customer authentication, authorization, federation, identity orchestration and identity lifecycle services.
Develop architecture supporting modern authentication capabilities including Passkeys, Passwordless Authentication, Multifactor Authentication, Adaptive Authentication, Risk Based Authentication and Identity Federation.
Provide architectural leadership across CIAM platforms and technologies including Ping Identity, ForgeRock, Okta, Auth0, Microsoft Entra ID or comparable enterprise identity platforms.
Define architecture patterns using OAuth 2.0, OpenID Connect, SAML, SCIM, FIDO2, WebAuthn and related identity standards.
Requirements
Nice to have: Financial Services
Nice to have: Banking
Nice to have: Payments
Nice to have: Highly Regulated Industry Experience
Principal CIAM ArchitectCitizens Bank · Johnston, US+5 more
Information Security ArchitectHH Global · Bogotá, Colombia
IAM & AI Engineer (Identity and Access Management)Sainsbury's · Coventry, United Kingdom+1 more
IAM Architect/EngineerStrada Global · Remote, Spain+1 more