C

Carlyle

Global private equity and credit investor

Engineer – IAM & Endpoint Platform

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeWashington, DC, USAHybrid

About the Job

Requirements

  • A bachelor's degree or equivalent years of relevant experience is required.
  • Six or more years of overall relevant technical experience is required.
  • Experience in IT systems engineering focused on identity and access management, endpoint management, or related disciplines is preferred.
  • Expert-level identity and access management skills across identity governance and administration, privileged access management, single sign-on, multifactor authentication, and role-based access control are required, including role lifecycle, entitlement reviews, segregation of duties, and access certifications in SailPoint IdentityNow.
  • Experience supporting access governance audits and regulatory reviews, including producing audit-ready evidence for internal and external reviewers, is required.
  • Experience developing automation scripts for identity and access provisioning, endpoint configuration, and operational tasks is required.
  • Strong analytical and troubleshooting skills across complex cross-platform issues, including network connectivity fundamentals, are required.
  • Clear communication with technical and executive audiences and white-glove support for executive end users are required.
  • Proficiency with Jira and Confluence and the ability to manage and prioritize multiple concurrent initiatives are required.
  • Availability for an on-call rotation and willingness to support planned and unplanned maintenance during evenings and weekends as needed are required.
  • Microsoft platform skills: Active Directory, Group Policy, Domain Name System, Dynamic Host Configuration Protocol, Azure, Microsoft 365 (Exchange, SharePoint, Teams, OneDrive, and Power Automate), and PowerShell modules including AAD, Exchange, and MSOL.
  • AI coding and automation skills, including tools such as Cursor, Claude Code, and Codex.
  • Microsoft Intune and endpoint management skills, including Windows and iOS enrollment, Autopilot, co-management, device compliance policies, configuration profiles, application deployment, Conditional Access, Device Health Attestation, LAPS, endpoint security policies, and Defender for Endpoint integration.
  • Identity and privileged access management skills with Okta, SailPoint IdentityNow, CyberArk Vault/CPM/PSM, SAML, OIDC, RBAC, and just-in-time access.
  • Zero Trust architecture skills, including Conditional Access, device compliance enforcement, Zscaler, identity-driven network segmentation, and continuous verification.
  • Compliance and governance skills, including SOX ITGCs, NIST 800-53, ISO 27001, CIS Benchmarks, access recertification, audit evidence collection, and endpoint posture assessment.
  • Jamf skills for macOS and iPadOS management and application packaging and deployments.
  • Virtual desktop platform skills with Azure Virtual Desktop and Windows 365.
  • Scripting skills in PowerShell, Python, Bash, Visual Basic, and Batch.
  • AI and agentic security skills, including Microsoft Copilot, AI-assisted identity governance, agentic AI identity lifecycle management, machine identity governance, OAuth grant discovery, non-human identity controls, and prompt engineering for IT operations.

Responsibilities

  • Serve as a subject matter expert across identity governance and administration, privileged access management, single sign-on, multifactor authentication, and endpoint security; design, automate, and maintain identity and access management solutions across SailPoint IdentityNow, Okta, Active Directory, Entra ID, and Workday to govern access for internal and external users.
  • Administer Okta single sign-on, multifactor authentication, adaptive authentication, Lifecycle Management, and Workflows; enforce Zero Trust controls across identity and endpoints, including device-compliance-based Conditional Access in Entra ID.
  • Design and maintain Joiner-Mover-Leaver workflows and role-based access control frameworks in SailPoint IdentityNow, including role mining, entitlement mapping, provisioning, access certifications, and automated deprovisioning to enforce least-privilege access and meet regulatory requirements.
  • Run day-to-day identity and access management operations, including single sign-on onboarding, multifactor authentication administration, access reviews, entitlement cleanup, human-resources-driven lifecycle events, and platform upgrades.
  • Contribute to modernization of identity, endpoint, and access management platforms, driving initiatives that deliver measurable security, efficiency, and compliance value.
  • Support identity and access workstreams related to mergers, acquisitions, and divestitures.
  • Apply artificial intelligence to streamline identity and endpoint operations within financial-services compliance guardrails, and govern identities for agentic artificial intelligence and non-human identities, including OAuth grant reviews, least-privilege scoping, and extending Joiner-Mover-Leaver processes to machine identities.
  • Serve as an escalation point for executive-level technical issues and interface with senior stakeholders and their administrative teams to diagnose and resolve complex problems.
  • Own technical solutions end-to-end, from design and implementation through steady-state operations, and build automation using PowerShell and Python to streamline configuration management and reduce manual effort.
  • Resolve complex technical incidents, perform root-cause analysis on high-impact disruptions, meet service-level objectives, and serve as the Service Desk escalation point for identity and endpoint issues; maintain runbooks and technical documentation to support operational continuity.
  • Support identity and endpoint compliance programs, including access recertifications, privileged-account audits, and endpoint posture assessments, and partner with Information Security, Legal, and Compliance on SOX, NIST, and ISO 27001 obligations.
  • Contribute to other Enterprise Productivity Solutions workstreams as needed, including Microsoft 365 administration, broader Microsoft platform initiatives, virtual desktop solutions, and other end-user technology platforms, while keeping identity and endpoints as the primary focus.

Desired Qualifications

  • A degree in Information Technology or a similar engineering discipline is strongly preferred.
  • IAM-focused certifications are preferred, such as SailPoint IdentityNow Engineer, Okta Certified Professional/Administrator, or SC-300: Microsoft Identity and Access Administrator.
  • Microsoft endpoint certifications are preferred, such as MD-102: Microsoft 365 Endpoint Administrator or MS-102: Microsoft 365 Administrator Expert.
  • Jamf certifications are preferred, such as Jamf Certified Associate, Jamf Certified Tech, or Jamf Certified Admin.

About the Company

Carlyle

Global private equity and credit investor

Carlyle manages alternative investments for institutions and high-net-worth individuals. Client money is pooled into funds or managed accounts, and investment teams source, diligence, and actively manage holdings to buy, grow, and exit investments, with returns coming from asset appreciation, income, and realized exits. It differentiates itself with a large global platform across multiple strategies and geographies, broad deal flow, specialized teams, and long-standing relationships that help build diversified portfolios in private equity, credit, and real assets. Its goal is to generate attractive, risk-adjusted returns for clients over the long term while preserving capital and providing liquidity options suitable to each strategy.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Dublin, Ireland
Founded
1987

Recently Posted Jobs

Explore more opportunities at Carlyle

See more jobs