> Markdown version of [/jobs/ext/3835470-identity-access-management-engineer-pam-active-directory](https://www.wearedevelopers.com/jobs/ext/3835470-identity-access-management-engineer-pam-active-directory). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity & Access Management Engineer (PAM / Active Directory)

- **Company:** Signal
- **Location:** Mundelein, IL, United States
- **Experience:** Expert
- **Salary:** $150,000.0 - $185,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Active Directory Federation Services, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OpenID, Remote Access Technology, Security Assertion Markup Language (SAML), Okta, Process Control Systems
- **Published:** October 19, 2026
- **Apply:** https://www.thejobnetwork.com/job/ccae1d04-bff1-4bb2-afe0-230518de737a/identity-access-management-engineer-pam-active-directory

## About the Role

Eligibility: Public Trust eligible (U.S. citizenship or green card required and ability to pass a background investigation) - no active clearance required., The ideal candidate is a Microsoft infrastructure engineer at heart, with years of on-premises Active Directory work behind them and hands-on time deploying privileged access tools. Previous experience with BeyondTrust Privileged Remote Access or Password Safe, Active Directory migrations or consolidations in environments with tens of thousands of users, ADFS or Microsoft certificate services, Microsoft certifications such as MCSE, and work in OT, industrial control system, or isolated network environments., * Public Trust eligible (U.S. citizenship or green card required and ability to pass a background investigation; no active clearance required).
\n

 * Strong technical writing and communication skills, with the ability to explain identity and access decisions to both technical and non-technical audiences.
\n

 * 5+ years of IT or cybersecurity engineering experience, including 2+ years of hands-on on-premises Active Directory engineering.
\n

 * Hands-on deployment of BeyondTrust in a large environment, including password vaulting.
\n

 * Hands-on on-premises Active Directory engineering in a large enterprise (e.g., forest and domain design, group policy, privileged account tiering).
\n

 * Experience integrating Active Directory with Okta for SSO and MFA, using protocols such as SAML, OIDC, Kerberos, and LDAP.
\n

 * Experience with credential rotation and session monitoring.
\n