> Markdown version of [/jobs/ext/3342536-associate-security-engineer](https://www.wearedevelopers.com/jobs/ext/3342536-associate-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Associate Security Engineer - **Company:** M/A Com Technolgy Solutions - **Location:** Lowell, MA, United States - **Experience:** Starter - **Salary:** $62,000.0 - $100,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Admin Tools, Role-Based Access Control, Anti-Phishing, Single Sign-On, User Environment Management, Scripting - **Published:** September 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ea22c9be8b8c4e0a ## About the Role * 1-3 years in IT Support, Systems Administration, or End-User Services with a strong understanding of user pain points. * Deep practical knowledge of Active Directory, user object lifecycles, and basic Windows/Mac endpoint troubleshooting. * Demonstrated ability to document complex IT processes and a strong drive to learn modern SSO administration and automation scripting. ## Description The Team & Your Role This role owns the "human" element of our security posture. Designed as a launchpad from End-User Services into advanced security engineering, you will automate the identity lifecycle, protect user communications, and enforce endpoint compliance. You will spend 80% of your time managing access operations and 20% designing zero-trust device posture frameworks, acting as the critical bridge between the Security team and the Helpdesk. Core Responsibilities: Platform Engineering (80%) * Map, streamline, and automate the Joiner, Mover, and Leaver (JML) identity lifecycle workflows. * Maintain enterprise directory hygiene (Active Directory/Entra ID) and assist with Single Sign-On (SSO) and MFA integrations. * Administer automated email security gateways to protect against phishing and business email compromise. * Execute the operational deployment of Privileged Access Management (PAM) tools to systematically eliminate standing local admin rights. Core Responsibilities: Strategic Architecture (20%) * Establish the definitive compliance baseline (encryption, domain-join status, MFA) required for any device to access the corporate network. * Build and maintain Conditional Access matrices to enforce zero-trust identity policies globally. * Draft standardized Role-Based Access Control (RBAC) templates to simplify department-level onboarding.