Engineer, IAM & Endpoint Platform

Requirements

• Education & Certificates
• Bachelor's Degree, or equivalent years of relevant experience, required
• Degree in Information Technology, or similar engineering discipline, strongly preferred
• IAM-focused certifications preferred (e.g., SailPoint IdentityNow Engineer, Okta Certified Professional/Administrator, SC-300: Microsoft Identity and Access Administrator)
• Microsoft endpoint certifications preferred (e.g., MD-102: Microsoft 365 Endpoint Administrator, MS-102: Microsoft 365 Administrator Expert)
• Jamf certifications preferred (e.g., Jamf Certified Associate, Jamf Certified Tech, Jamf Certified Admin)
• Professional Experience
• 6+ years of overall relevant technical experience, required
• Experience in IT systems engineering with a focus on IAM, endpoint management, or related disciplines, preferred
• Expert-level IAM skills spanning IGA, PAM, SSO, MFA, and RBAC, including role lifecycle, entitlement reviews, segregation of duties (SoD), and access certifications in SailPoint IdentityNow
• Experience supporting access governance audits and regulatory reviews; able to produce audit-ready evidence for internal and external reviewers
• Experience developing automation scripts for IAM provisioning, endpoint configuration, and operational tasks
• Strong analytical and troubleshooting skills across complex, cross-platform issues, including network connectivity fundamentals
• Clear communicator with technical and executive audiences; committed to white-glove support for executive end users
• Proficient with project and service management tools (Jira, Confluence); able to manage and prioritize multiple concurrent initiatives
• Availability for on-call rotation and willingness to support planned and unplanned maintenance during evenings and weekends as needed
• Competencies & Attributes
• Microsoft Platform Stack (Active Directory, GPO, DNS, DHCP, Azure, Microsoft 365 (Exchange, SharePoint, Teams, OneDrive, Power Automate); PowerShell modules including AAD, Exchange, MSOL)
• AI Coding & Automation (e.g., Cursor, Claude Code, Codex)
• Microsoft Intune & Endpoint Management (Windows/iOS enrollment, Autopilot, Co-management, Device Compliance Policies, Configuration Profiles, App Deployment, Conditional Access, Device Health Attestation, LAPS, Endpoint Security policies, Defender for Endpoint integration)
• Identity & Privileged Access Management (Okta, SailPoint IdentityNow, CyberArk Vault/CPM/PSM, SAML, OIDC, RBAC, JIT access)
• Zero Trust Architecture (Conditional Access, device compliance enforcement, Zscaler, identity-driven network segmentation, continuous verification)
• Compliance & Governance (SOX ITGCs, NIST 800-53, ISO 27001, CIS Benchmarks, access recertification, audit evidence collection, endpoint posture assessment)
• Jamf (macOS/iPadOS Management, App Packaging/Deployments)
• Virtual Desktop Platforms (Azure Virtual Desktop, Windows 365)
• Scripting (PowerShell, Python, Bash, Visual Basic, Batch)
• AI & Agentic Security (Microsoft Copilot, AI-assisted identity governance, agentic AI identity lifecycle management, machine identity governance, OAuth grant discovery, non-human identity (NHI) controls, prompt engineering for IT operations, etc.)
• Benefits/Compensation
• The compensation range for this role is specific to Washington, DC and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications.
• The anticipated base salary range for this role is $160,000 to $180,000.
• In addition to the base salary, the hired professional will enjoy a comprehensive benefits package spanning retirement benefits, health insurance, life insurance and disability, paid time off, paid holidays, family planning benefits and various wellness programs. Additionally, the hired professional may also be eligible to participate in an annual discretionary incentive program, the award of which will be dependent on various factors, including, without limitation, individual and organizational performance.
• Due to the high volume of candidates, please be advised that only candidates selected to interview will be contacted by Carlyle.

Who We Are

Preferred Qualifications

• Degree in Information Technology, or similar engineering discipline, strongly preferred
• IAM-focused certifications preferred (e.g., SailPoint IdentityNow Engineer, Okta Certified Professional/Administrator, SC-300: Microsoft Identity and Access Administrator)
• Microsoft endpoint certifications preferred (e.g., MD-102: Microsoft 365 Endpoint Administrator, MS-102: Microsoft 365 Administrator Expert)
• Jamf certifications preferred (e.g., Jamf Certified Associate, Jamf Certified Tech, Jamf Certified Admin)
• Experience in IT systems engineering with a focus on IAM, endpoint management, or related disciplines, preferred
• The compensation range for this role is specific to Washington, DC and takes into account a wide range of factors including but not limited to the skill sets required/preferred; prior experience and training; licenses and/or certifications.