Forward Deployed Identity Security Engineer

EnscureX is hiring a Forward Deployed Identity Security Engineer to work directly with customers on identity environments and access governance. The role includes deploying and configuring EnscureX, developing customer solutions, supporting security and compliance work, and translating field insights into product features and roadmap input.

Responsibilities:

• Lead technical discovery with customers to map their identity landscape, access models, risks, and compliance gaps
• Deploy and configure EnscureX in customer environments, owning the path from kickoff to measurable value
• Design access governance solutions: role models, least-privilege strategies, access review programs, JML (joiner, mover, leaver) automation, and privileged access controls
• Spot recurring customer problems and turn them into product proposals, prototypes, and roadmap input
• Explore new ideas across identity threat detection, non-human identities, AI agent access, and policy automation
• Act as the voice of the customer inside EnscureX and the voice of EnscureX inside the customer
• Support security assessments, investigations, and remediation planning tied to identity risk
• Help customers prepare for ISO 27001, SOC 2, and NIST audits using access evidence and controls
• Produce clear documentation, playbooks, and reports that both engineers and executives can act on

Requirements:

• Deep, hands-on expertise in identity and access management, ideally with Microsoft Entra ID (Conditional Access, PIM, entitlement management, app registrations, service principals)
• Strong understanding of RBAC, ABAC, least privilege, SoD (separation of duties), access certifications, and identity lifecycle management
• Working knowledge of SSO, SAML, OIDC, OAuth, SCIM, and MFA, plus where they commonly break
• Familiarity with IGA, PAM, and ITDR tools and how they fit together in a security stack
• Comfort with scripting or APIs (PowerShell, Python, Microsoft Graph) to prototype, automate, and investigate
• Experience mapping access controls to ISO 27001, SOC 2, or NIST
• Customer-facing experience: consulting, solutions engineering, implementation, or similar
• A builder's mindset. You see a problem three times and start thinking about how to solve it for everyone
• Ability to explain complex technical issues clearly to security teams, IT admins, and executives
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
• Relevant certifications (e.g., SC-300, CISSP, CISM, Security+) are a plus