Advanced Security Engineer (IAM)

Summary

Dice is seeking an Advanced Security Engineer focused on Identity & Access Management. The role involves designing and operating identity-centric security platforms, centralizing access control, and ensuring secure operations across enterprise systems and cloud resources.

Responsibilities

• Design, build, and operate internal IAM and cloud security services used across the organization
• Write production-quality software using modern engineering best practices
• Automate security controls to reduce operational burden and technical debt
• Partner with engineering teams to embed secure-by-default patterns into their workflows
• Participate in on-call support, incident response, root-cause analysis, and reliability improvements
• Mentor engineers and advocate for pragmatic security improvement

Skills

• Bachelor's in Computer Science, Information Security, or equivalent experience
• 2+ years of commercial experience in software development (C#, Python, Java or other general-purpose modern programming language) with a solid understanding of computer science fundamentals, including algorithms and data structures
• Experience with cloud technologies (preferably Azure), DevSecOps practices, and automation tools (e.g., GitHub Actions)
• Growth mindset and eagerness to learn across engineering and security domains
• Ability to take feedback and strive for continual improvement
• Endpoint Security
• Network Security
• Penetration Testing
• Security Architecture Design
• Security Automation
• Security Information
• Security Information and Event Management (SIEM)
• Security Operations
• Threat Modeling
• Vulnerability Management
• Experience securing cloud-native applications / SaaS solutions and networks
• Familiarity with vulnerability scanning and threat protection
• Relevant certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Understanding Zero Trust security principles and their practical application
• Familiarity with regulatory compliance standards and frameworks (e.g., GDPR, HIPAA)
• Exposure to other cloud platforms (AWS, Google Cloud Platform)

Qualifications

Must Haves

• Bachelor's in Computer Science, Information Security, or equivalent experience
• 2+ years of commercial experience in software development (C#, Python, Java or other general-purpose modern programming language) with a solid understanding of computer science fundamentals, including algorithms and data structures
• Experience with cloud technologies (preferably Azure), DevSecOps practices, and automation tools (e.g., GitHub Actions)
• Growth mindset and eagerness to learn across engineering and security domains
• Ability to take feedback and strive for continual improvement
• Endpoint Security
• Network Security
• Penetration Testing
• Security Architecture Design
• Security Automation
• Security Information
• Security Information and Event Management (SIEM)
• Security Operations
• Threat Modeling
• Vulnerability Management

Nice to Haves

• Experience securing cloud-native applications / SaaS solutions and networks
• Familiarity with vulnerability scanning and threat protection
• Relevant certifications: Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Understanding Zero Trust security principles and their practical application
• Familiarity with regulatory compliance standards and frameworks (e.g., GDPR, HIPAA)
• Exposure to other cloud platforms (AWS, Google Cloud Platform)