Senior Identity & Security Engineer

Trility Consulting
2dRemote

About The Position

At Trility Consulting®, we’ve built a strong, remote-work culture where people thrive, grow, and support each other – earning us Great Place to Work® Certification. Headquartered in Central Iowa, we embrace flexible schedules and collaboration across geographically distributed teams serving clients from all corners of the United States and globally. We seek team members with the grit necessary to forge paths where none previously existed, to get back up when circumstances knock them down, to adapt to the changing needs of the client even when it is uncomfortable, and to deliver on our commitments. Candidates must respect and value people, recognize that over-communication is barely good enough, thrive on solving complex problems, have a passion for building teams, and know that delivering what a client actually values is more important than their own predispositions. They understand value proposition, love delivering value, and take pride in learning the expansive and ever-changing business of clients. Candidates are self-motivated and relentlessly working to become more today than they were yesterday. Trility Consulting is seeking a Senior Identity & Security Engineer who serves as the technical authority for identity architecture, secure transition, and zero-trust governance. In this role, you will lead the migration from Okta to Microsoft Entra ID, architect privileged access controls with BeyondTrust, and ensure architectural integrity as a new standalone identity perimeter is established. While an MSP executes the broader M365 migration, you will act as the internal design authority—reviewing configurations, enforcing governance standards, and ensuring seamless integration with legacy Active Directory forests. This is a high-ownership role focused on building a secure, scalable identity foundation from the ground up. This is a remote 1099 position.

Requirements

  • 7+ years of experience in Identity & Access Management (IAM), infrastructure security, or enterprise identity engineering
  • Proven experience leading at least one major Okta to Entra ID migration, including SSO, MFA, and Conditional Access policy transitions
  • Expert-level knowledge of Microsoft Entra ID (Azure AD), including tenant configuration, identity governance, conditional access, and hybrid identity models
  • Deep experience with BeyondTrust (Password Safe and/or Remote Support) for privileged access management and Tier-0 security controls
  • Strong understanding of Active Directory architecture, including multi-forest environments and hybrid identity integrations
  • Demonstrated ability to translate business divestiture or separation requirements into scalable, secure identity and access policies
  • Experience operating as a technical authority or design reviewer in environments supported by MSPs or third-party vendors
  • Strong automation skills using PowerShell and Microsoft Graph API
  • Deep knowledge of zero-trust security principles and privileged access governance
  • Excellent communication skills with the ability to guide executive and technical stakeholders through identity and security strategy decisions
  • Must reside within the United States
  • Must be authorized to work in the United States without sponsorship now or in the future
  • Must be able to pass a background check

Responsibilities

  • Lead the migration of all SSO, MFA, and Conditional Access policies from Okta to Microsoft Entra ID
  • Architect and implement BeyondTrust to establish Tier-0 privileged access controls across newly acquired AD forests and cloud environments
  • Serve as the internal technical authority and design reviewer for the MSP’s Entra ID tenant configuration, ensuring governance standards, naming conventions, and security defaults align with long-term strategy
  • Lead the technical hand-off and integration of standalone Active Directory forests into the new Entra ID tenant
  • Design and enforce zero-trust identity principles across authentication, authorization, and privileged access management
  • Develop PowerShell and Microsoft Graph API automation to streamline identity lifecycle management, governance controls, and reporting
  • Define and document identity architecture, authentication flows, access models, and governance frameworks
  • Partner with infrastructure, security, and compliance stakeholders to ensure enterprise-wide alignment with security standards
  • Provide strategic guidance to executive and technical leadership on identity and security decisions

Benefits

  • Work remotely anywhere in the United States with flexible work hours
  • Sponsored and supported learning opportunities
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service