Engineer – IAM & Endpoint Platform
$160k - $180k+ Annual discretionary incentive program
Senior
Bachelor's
Washington, DC, USA
Hybrid
CybersecuritySecurity Engineering & Architecture
About the job
Requirements
- A bachelor's degree or equivalent years of relevant experience is required.
- Six or more years of overall relevant technical experience is required.
- Experience in IT systems engineering focused on identity and access management, endpoint management, or related disciplines is preferred.
- Expert-level identity and access management skills across identity governance and administration, privileged access management, single sign-on, multifactor authentication, and role-based access control are required, including role lifecycle, entitlement reviews, segregation of duties, and access certifications in SailPoint IdentityNow.
- Experience supporting access governance audits and regulatory reviews, including producing audit-ready evidence for internal and external reviewers, is required.
- Experience developing automation scripts for identity and access provisioning, endpoint configuration, and operational tasks is required.
- Strong analytical and troubleshooting skills across complex cross-platform issues, including network connectivity fundamentals, are required.
- Clear communication with technical and executive audiences and white-glove support for executive end users are required.
- Proficiency with Jira and Confluence and the ability to manage and prioritize multiple concurrent initiatives are required.
- Availability for an on-call rotation and willingness to support planned and unplanned maintenance during evenings and weekends as needed are required.
- Microsoft platform skills: Active Directory, Group Policy, Domain Name System, Dynamic Host Configuration Protocol, Azure, Microsoft 365 (Exchange, SharePoint, Teams, OneDrive, and Power Automate), and PowerShell modules including AAD, Exchange, and MSOL.
- AI coding and automation skills, including tools such as Cursor, Claude Code, and Codex.
- Microsoft Intune and endpoint management skills, including Windows and iOS enrollment, Autopilot, co-management, device compliance policies, configuration profiles, application deployment, Conditional Access, Device Health Attestation, LAPS, endpoint security policies, and Defender for Endpoint integration.
- Identity and privileged access management skills with Okta, SailPoint IdentityNow, CyberArk Vault/CPM/PSM, SAML, OIDC, RBAC, and just-in-time access.
- Zero Trust architecture skills, including Conditional Access, device compliance enforcement, Zscaler, identity-driven network segmentation, and continuous verification.
- Compliance and governance skills, including SOX ITGCs, NIST 800-53, ISO 27001, CIS Benchmarks, access recertification, audit evidence collection, and endpoint posture assessment.
- Jamf skills for macOS and iPadOS management and application packaging and deployments.
- Virtual desktop platform skills with Azure Virtual Desktop and Windows 365.
- Scripting skills in PowerShell, Python, Bash, Visual Basic, and Batch.
- AI and agentic security skills, including Microsoft Copilot, AI-assisted identity governance, agentic AI identity lifecycle management, machine identity governance, OAuth grant discovery, non-human identity controls, and prompt engineering for IT operations.
Responsibilities
- Serve as a subject matter expert across identity governance and administration, privileged access management, single sign-on, multifactor authentication, and endpoint security; design, automate, and maintain identity and access management solutions across SailPoint IdentityNow, Okta, Active Directory, Entra ID, and Workday to govern access for internal and external users.
- Administer Okta single sign-on, multifactor authentication, adaptive authentication, Lifecycle Management, and Workflows; enforce Zero Trust controls across identity and endpoints, including device-compliance-based Conditional Access in Entra ID.
- Design and maintain Joiner-Mover-Leaver workflows and role-based access control frameworks in SailPoint IdentityNow, including role mining, entitlement mapping, provisioning, access certifications, and automated deprovisioning to enforce least-privilege access and meet regulatory requirements.
- Run day-to-day identity and access management operations, including single sign-on onboarding, multifactor authentication administration, access reviews, entitlement cleanup, human-resources-driven lifecycle events, and platform upgrades.
- Contribute to modernization of identity, endpoint, and access management platforms, driving initiatives that deliver measurable security, efficiency, and compliance value.
- Support identity and access workstreams related to mergers, acquisitions, and divestitures.
- Apply artificial intelligence to streamline identity and endpoint operations within financial-services compliance guardrails, and govern identities for agentic artificial intelligence and non-human identities, including OAuth grant reviews, least-privilege scoping, and extending Joiner-Mover-Leaver processes to machine identities.
- Serve as an escalation point for executive-level technical issues and interface with senior stakeholders and their administrative teams to diagnose and resolve complex problems.
- Own technical solutions end-to-end, from design and implementation through steady-state operations, and build automation using PowerShell and Python to streamline configuration management and reduce manual effort.
- Resolve complex technical incidents, perform root-cause analysis on high-impact disruptions, meet service-level objectives, and serve as the Service Desk escalation point for identity and endpoint issues; maintain runbooks and technical documentation to support operational continuity.
- Support identity and endpoint compliance programs, including access recertifications, privileged-account audits, and endpoint posture assessments, and partner with Information Security, Legal, and Compliance on SOX, NIST, and ISO 27001 obligations.
- Contribute to other Enterprise Productivity Solutions workstreams as needed, including Microsoft 365 administration, broader Microsoft platform initiatives, virtual desktop solutions, and other end-user technology platforms, while keeping identity and endpoints as the primary focus.
Desired Qualifications
- A degree in Information Technology or a similar engineering discipline is strongly preferred.
- IAM-focused certifications are preferred, such as SailPoint IdentityNow Engineer, Okta Certified Professional/Administrator, or SC-300: Microsoft Identity and Access Administrator.
- Microsoft endpoint certifications are preferred, such as MD-102: Microsoft 365 Endpoint Administrator or MS-102: Microsoft 365 Administrator Expert.
- Jamf certifications are preferred, such as Jamf Certified Associate, Jamf Certified Tech, or Jamf Certified Admin.
About the company
Carlyle is a global investment firm that manages private capital across three segments: Global Private Equity, Global Credit, and Carlyle AlpInvest. It raises capital from institutional and other investors and allocates it to private equity deals, credit strategies, and private markets services to help companies grow and generate returns. Its products include private equity investments (growth and buyout), credit-based lending and structured credit, and private markets solutions via AlpInvest. Carlyle differentiates itself with a widespread footprint (28 offices across four continents), deep industry expertise, and an integrated, multi-strategy platform that coordinates capital deployment and value creation.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Dublin, Ireland
Founded
1987
Get referred to Carlyle
See people who can refer or advise you
Simplify's Take
What believers are saying
- August 5, 2026: Q2 distributable earnings reached $472 million, up 18% year over year.
- Q2 2026 fee-related earnings hit a record $357.7 million.
- Second-quarter inflows reached $16.8 billion, led by credit and secondaries.
What critics are saying
- Carlyle’s shares lost over 14% in 2026, weakening retention and acquisition currency.
- SEBI’s January 2026 Yes Bank insider-trading notice threatens Carlyle’s India relationships.
- If fundraising stalls, Carlyle misses its 2028 target and the turnaround narrative collapses.
What makes Carlyle unique
- August 2026: Carlyle’s three segments generated record fee-related earnings across buyouts, credit, and AlpInvest.
- Harvey Schwartz’s 2028 targets and $2 billion buyback show disciplined capital allocation.
- May 2026’s $5 billion cornerstone deal proves Carlyle still wins giant mandates.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Life Insurance
- Disability Insurance
- Paid Vacation
- Paid Holidays
- Family Planning Benefits
- Wellness Program