Jobs in the United States

25+ jobs

Save this search

Added just now
Senior Electrical Engineer
Cementation USA
Salt Lake City, UT
The Electrical Engineer provides safe, "Best for Project" solutions for complex projects, while ensuring regulatory compliance for all electrical engineering deliverables. This role is…
Added 5 mins ago
BH
Radiation Therapist
Bassett Healthcare Network
Oneonta, NY
- $44.81 to $67.21 USD / hour
Maintains familiarity with the physical and geometric characteristics of the radiation equipment, and the proper operation of all controls.
Added 17 mins ago
IG
Application Security & Akamai Onboarding Engineer
Insight Global
Woonsocket, RI
- From $83 USD / hour
This person will be hands-on in Akamai, independently configuring CDN services, WAF policies, edge security controls, TLS, and origin protection. They will own applications through…
Added 20 mins ago
BP
Electronics Engineer
Bonneville Power Administration
Vancouver, WA
- $57,999 to $125,478 USD / year
This position is located with Bonneville Power Administration, in PSC Technical Services organization (JTT), Controls & Communications (JT), of Chief Information Office (J).
Added 20 mins ago
BP
Electronics Engineer
Bonneville Power Administration
Vancouver, WA
- $57,999 to $125,478 USD / year
This position is located with Bonneville Power Administration, in PSC Technical Services organization (JTT), Controls & Communications (JT), of Chief Information Office (J).
Added 33 mins ago
Controls Technician - Maintenance
Carlisle
Franklin Park, Illinois, IL
Communicate issues and potential required changes with Controls Engineer
Added 33 mins ago
Senior Sales Engineer (Houston)
DQQ Cohesity Inc.
Remote, United States
We are seeking a driven and technically strong Senior Sales Engineer to support enterprise sales engagements and help customers adopt Cohesity’s modern data security and management…
Added 33 mins ago
Senior SLED Sales Engineer - Public Healthcare (West Accounts)
DQQ Cohesity Inc.
Remote, United States
We are seeking a driven and technically strong Senior Sales Engineer to support public healthcare sales engagements and help customers adopt Cohesity’s modern data security and management…
Added 37 mins ago
O
Senior Project Engineer
Orion
Vancouver, WA
- $110,000 to $150,000 USD / year
Senior Project Engineer – Marine Construction
Added 44 mins ago
Engineer I - Intern/Co-op Conversion (2026/2027)
Charlotte, NC · Owensville, IN · Plainfield, IN · Ocala, FL · Arden, NC · Cincinnati, OH · Union, KY · Edwardsport, IN · Cayuga, IN · Raleigh, NC · Lake Mary, FL · Goldsboro, NC · Noblesville, IN
…perform analysis and design of transmission lines and structures, protection and controls systems, and physical/electrical components within Duke Energy’s transmission system. Preferred…
Added 50 mins ago
Cybersecurity Engineer SME
Govcio LLC
Tampa, FL
The Cybersecurity Engineer SME serves as a senior technical subject matter expert for cybersecurity design, engineering, integration, and technical assurance within a multidisciplinary…
Added 57 mins ago
AM
ENGINEERING TECHNICIAN (CIVIL)
Air Mobility Command
McGuire AFB, NJ
- $72,737 to $94,563 USD / year
…goals, objectives, and procedures to ensure contracted civil engineer services meet all applicable DoD and AF directives, public laws, American Society of Mechanical Engineers (ASME),…
Added 1 hour ago
T
Associate Mechanical Engineer
Toyon
Ashburn, VA
- $105,000 to $135,000 USD / year
Toyon is seeking a Mechanical Engineer to support a critical infrastructure protection program. In this role, you will work closely with Toyon’s engineering team and client stakeholders,…
Added 1 hour ago
R
Senior Program Manager & Key Client Lead, Data Centers
Ramboll
Arlington, Virginia, VA
- $150,000 to $225,000 USD / year
You will join Ramboll’s North America Power Systems team and work with specialists in substation engineering, protection and control, transmission, interconnection, power generation,…
Added 1 hour ago
R
Senior Program Manager & Key Client Lead, Data Centers
Ramboll
Boston, Massachusetts, MA
- $150,000 to $225,000 USD / year
You will join Ramboll’s North America Power Systems team and work with specialists in substation engineering, protection and control, transmission, interconnection, power generation,…
Added 1 hour ago
R
Senior Program Manager & Key Client Lead, Data Centers
Ramboll
Syracuse, New York, NY
- $150,000 to $225,000 USD / year
You will join Ramboll’s North America Power Systems team and work with specialists in substation engineering, protection and control, transmission, interconnection, power generation,…
Added 1 hour ago
R
Senior Program Manager & Key Client Lead, Data Centers
Ramboll
Chicago, Illinois, IL
- $150,000 to $225,000 USD / year
You will join Ramboll’s North America Power Systems team and work with specialists in substation engineering, protection and control, transmission, interconnection, power generation,…
Added 1 hour ago
R
Senior Program Manager & Key Client Lead, Data Centers
Ramboll
Houston, Texas, TX
- $150,000 to $225,000 USD / year
You will join Ramboll’s North America Power Systems team and work with specialists in substation engineering, protection and control, transmission, interconnection, power generation,…
Added 1 hour ago
RI
Staff Regulatory Engineer
Radiant Industries
El Segundo, CA
- $177,500 to $218,926 USD / year
Radiant is seeking a driven Staff Regulatory Engineer who loves to think outside the box and challenge convention; in this role you will support the license application approval process…
Added 1 hour ago
RI
Senior Regulatory Engineer
Radiant Industries
El Segundo, CA
- $133,500 to $190,050 USD / year
Radiant is seeking a driven Senior Regulatory Engineer who loves to think outside the box and challenge convention; in this role you will support the license application approval process…
Added 1 hour ago
MA
Senior Software Engineer – Mainframe COBOL, z/OS, CICS, JCL
Manufacturers and Traders Trust Co
Buffalo, NY
- $97,100 to $161,800 USD / year
Partner with business and technology stakeholders to align delivery with priorities, requirements, risk controls, and enterprise standards.
Added 1 hour ago
Lead Controls Engineer - Major Projects Group
Blattner Company
Remote, United States
Serving as a recognized technical leader within the Major Projects Group, the Lead Controls Engineer drives design quality, consistency, and innovation across concurrent projects spanning…
Added 1 hour ago
Data Center Building Automation and Controls Engineer, Assistant Consultant
WSP
Milwaukee, WI
WSP is currently initiating a search for a Data Center Building Automation and Controls Engineer, Assistant Consultant for our Milwaukee, WI office. Be involved in projects with our kW…
Added 1 hour ago
Piping Field Engineer - Testing
Bechtel Corporation
New Albany, OH
Maintain area test records, metrics, and status reporting; provide progress, forecasts, and quantities to the Lead Pipe Testing Field Engineer, project controls, and construction management.
Added 1 hour ago
IAM Engineer I, II, III, or Senior
Tri-State Generation and Transmission Association, Inc.
Westminster, CO
The IAM Engineer is responsible for engineering, operating, and continuously improving Tri-State’s identity and access management (IAM) capabilities so that the right people and systems…

Fortellar

REMOTE - Sr. Security Engineer - Identity & Endpoint

Remote, United States

$130,000 to $155,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $130,000 to $155,000 USD / year
Posting language: English
Posted: Nov 3, 2026

Original job description

About Fortellar We are a boutique IT consulting and business process outsourcing organization supporting mid to enterprise-level organizations. We are a small, but mighty, team of experts who know how to stretch, adapt, and put on any hat required in the moment to make our clients successful and enable Fortellar’s growth. Keys to success at Fortellar include:

Collaboration: You demonstrate excellence in remote collaboration across your Fortellar and client teams.
Growth Mindset: You embrace personal growth and are always learning new things to support your team, your clients, and your personal goals.
Client Success: You have a passion for your client’s success – you don’t just deliver to the contract you ensure that your client’s goals and needs are met.
Humanity First: Honest and transparency are your natural instincts – your actions speak louder than your words and your team members love working with you.
Entrepreneurial: You find a way to get it done, no matter what the challenges or seeming blockers are in front of you

Job Description Summary The Sr. Security Engineer, Identity & Endpoint designs, deploys, and operates identity, privileged access, vulnerability, endpoint, and device trust controls for Fortellar's clients, with primary assignment to large-scale, multi-workstream security remediation engagements. The role typically carries the largest and most dependency-critical share of such a program: the conditional access design this engineer produces is what gates device-compliance enforcement, and that sequence is commonly the longest critical path in the delivery plan. Engagements involve hybrid identity estates spanning Microsoft Entra ID and on-premises Active Directory joined by directory synchronization, managed workstation and Windows Server estates, Microsoft Intune, and Microsoft Defender for Endpoint.

This is a hands-on engineering role with direct client exposure. The engineer is accountable for changes capable of denying access to the client's entire workforce, and is expected to exercise the judgment to pilot, stage, and where necessary halt a rollout, and to explain that decision to client stakeholders directly. The role requires deep Microsoft identity and endpoint expertise, disciplined change management, strong verbal and written communication, and the professional presence to represent Fortellar credibly in front of client technical staff and executives, both in person and virtually.

Must be able to travel 10% - 20% to client sites

Identity and Privileged Access Engineering

Design and enforce phishing-resistant multifactor authentication for administrators and multifactor authentication for the full user population, using modern authentication methods (e.g., FIDO2 security keys, Windows Hello for Business, passkeys).
Reduce privileged directory role membership to a justified minimum, remove dormant and stale accounts from sensitive groups, and produce the privileged-overlap map between Microsoft Entra ID and on-premises Active Directory.
Remediate domain-dominance exposure, including krbtgt account rotation, removal of delegation from privileged accounts, and migration of the directory synchronization connector onto a dedicated least-privilege identity.
Redesign Conditional Access around defined user and administrator personas and apply role-based access control, recognizing that this design is a prerequisite for device trust enforcement elsewhere in the program.
Implement Privileged Identity Management with just-in-time elevation, and enforce sign-in frequency and non-persistent administrator sessions.
Evaluate, select, deploy, and operate privileged access management and identity governance capability, and establish quarterly access recertification as a sustainable business-as-usual process.

Vulnerability, Endpoint, and Asset Management

Remediate, as emergency change, the recommendations carrying published exploit code and observed exploitation in the wild, working within the client's emergency change authority.
Author and publish a vulnerability management procedure and a workstation patch service level matching the standard already operating for servers.
Deploy Windows Autopatch and Microsoft Intune update rings, and reconcile the Active Directory, Intune, and Defender device populations into a single authoritative asset inventory.
Complete application dependency mapping, then retire legacy authentication protocols and enforce LDAP server signing and channel binding, sequencing the work so that dependency discovery precedes enforcement.
Deploy security baselines in staged waves across the managed endpoint estate and remove or formally risk-accept end-of-support systems and software.
Close local administrator credential management gaps across the estate and operate certificate lifecycle management with expiry alerting and unauthorized-software detection.
Review exposure score, remediation activity, and threat intelligence on a defined cadence, prioritizing by exploit availability and observed threat activity rather than by severity score alone.

Device Trust and Mobile Device Management

Enforce the client's ratified bring-your-own-device position, including restriction of corporate content synchronization to managed devices.
Deploy Microsoft Intune application protection policies across the Microsoft 365 mobile applications and execute the mobile application and device management plan across a previously unmanaged mobile estate.
Harden connected software-as-a-service applications, including multifactor authentication enforcement and session timeout configuration.
Require a compliant or hybrid-joined device through Conditional Access, enable remote wipe for devices holding organizational data, and apply session controls for unmanaged browsers.
Establish the device attestation cycle within joiner, mover, and leaver processes, and report on unmanaged access attempts on a defined cadence.

Change Management and Operational Safety

Design and operate pilot rings and staged rollouts for every change capable of denying user or administrator access, with documented rollback and tested break-glass accounts.
Prepare, submit, and present change records to the client's change process, including risk, blast radius, validation steps, and backout plan.
Execute change during scheduled maintenance windows, including evenings and weekends where the change cannot safely be made during business hours.
Halt or defer a rollout where validation is incomplete and communicate that decision and its schedule consequence to the engagement lead and the client without delay.

Experience and Education

Bachelor’s degree in Computer Science, Information Security or a related field
Preferred certifications: SC-300, MD-102, AZ-500, SC-100 or CISSP
8+ years in infrastructure or security engineering, including 5+ years in hybrid identity (Entra ID and on-premises AD)
4+ years deploying Microsoft Intune and Defender for Endpoint at enterprise scale
Proven experience designing Conditional Access, phishing-resistant MFA and Privileged Identity Management for 1,000+ users
3+ years in a client-facing consulting role, presenting to technical and executive stakeholders
Track record of leading high-risk changes through formal change management, using pilots, staged rollouts and rollback plans

This role is open only to candidates who currently live and are authorized to work in the United States. Applications must be submitted from within the U.S. Applications submitted from a location that does not match the candidate’s stated location will not be considered.

Apply About employer

More about this job

Skills

Regulatory compliance
Microsoft Active Directory
Microsoft Windows Server
Change management
Communication skills
Wheel impact load detector
Microsoft Windows
LDAP
Prioritization
Mobile device management
Microsoft 365
Service-oriented modelling
Computer science
Cybersecurity
CISSP
Microsoft Access

Report this job