{"id":3052964,"url":"https://alion.io/job/kbr-associate-security-engineer-identity-security","title":"Associate Security Engineer, Identity Security","company":{"id":4344,"name":"KBR","domain":"kbr.com","url":"https://alion.io/company/kbr","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":339,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Houston, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":325},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Incident Management","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Service Desk","optional":false},{"name":"Windows","optional":false},{"name":"LDAP","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-07-17T00:00:00Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-24T05:33:05Z","board_verified":true,"closed_at":null,"days_open":100,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":100},"description":"Title:\nAssociate Security Engineer, Identity SecurityKBR is seeking an Associate Security Engineer to join our Identity Security Services team within a global cybersecurity organization supporting complex, highly regulated enterprise environments. This hands-on role provides the opportunity to build technical expertise across identity and access management, authentication, privileged access, identity governance, and enterprise security technologies while working alongside experienced engineers and architects.\nYou will support the administration, security, and continuous improvement of identity platforms including Microsoft Entra ID, Active Directory, and hybrid identity solutions. The ideal candidate is curious, detail-oriented, eager to learn, and passionate about cybersecurity and technology. This is a permanent, full-time position based in the United States and requires U.S. citizenship.\nIn September 2025, KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense, intelligence, space, aviation, and critical infrastructure customers to deliver high-end engineering, science, technology, and mission support solutions.\nKey Responsibilities\nSupport the administration and operation of Microsoft Entra ID, Active Directory, hybrid identity, and directory synchronization services.\nPerform identity administration activities for users, groups, devices, applications, service accounts, and access permissions.\nTroubleshoot authentication, authorization, provisioning, account lifecycle, and access-related issues.\nReview logs, alerts, and system data to identify and resolve identity-related incidents and operational problems.\nSupport Conditional Access, multifactor authentication (MFA), passwordless authentication, and other modern access control solutions.\nAssist with privileged access management activities, including role assignments, access reviews, and least-privilege enforcement.\nSupport identity governance processes, including access reviews, entitlement management, and joiner, mover, and leaver activities.\nAssist with enterprise application integrations and identity federation technologies, including SAML, OAuth, OpenID Connect, and SCIM.\nSupport application identities, service principals, managed identities, workload identities, and service accounts.\nAssist with Active Directory administration, Group Policy management, directory health monitoring, and hybrid identity operations.\nSupport PKI and certificate lifecycle management activities, including certificate issuance, renewal, inventory, and trust relationships.\nIdentify and help remediate identity-related risks, including excessive access, stale accounts, weak authentication, and unmanaged credentials.\nSupport security monitoring, threat detection, and incident investigations using Microsoft security platforms and related tools.\nGather technical evidence, perform root cause analysis, and assist with remediation activities during security and operational incidents.\nParticipate in cloud deployments, application onboarding, tenant migrations, and other identity-related projects and initiatives.\nSupport audit, compliance, and governance activities through evidence collection, documentation, and control validation.\nCreate and maintain technical documentation, procedures, knowledge articles, and operational runbooks.\nAssist with reporting, automation, and continuous improvement efforts using PowerShell, Microsoft Graph, KQL, and related technologies.\nFollow established security, change management, incident management, and operational procedures.\nCollaborate with engineers, administrators, and stakeholders to improve identity security controls and operational effectiveness.\nCommunicate technical issues, findings, and project updates clearly while continuing to develop identity security knowledge and expertise.\nBasic Qualifications\nEducation & Experience:\nBachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field; equivalent combination of education and professional experience may be considered.\n2+ years of experience in information technology, cybersecurity, identity administration, systems administration, cloud support, service desk support, or a related technical field.\nU.S. citizenship required.\nSkills & Competencies:\nFoundational understanding of information technology concepts, including user accounts, permissions, authentication, operating systems, networking, and cloud services.\nFamiliarity with Microsoft Windows, Microsoft 365, Active Directory, Microsoft Entra ID, Azure, or comparable enterprise technologies.\nUnderstanding of core security principles such as least privilege, multifactor authentication, role-based access control, and identity lifecycle management.\nStrong technical aptitude and ability to learn new technologies and processes quickly.\nStrong troubleshooting, analytical, and problem-solving skills.\nAbility to follow established procedures, security standards, and change management requirements.\nStrong attention to detail and commitment to handling sensitive information responsibly.\nEffective written and verbal communication skills with the ability to document technical work clearly.\nAbility to collaborate within a team environment, manage assigned tasks, and escalate issues appropriately.\nDemonstrated reliability, integrity, professionalism, and commitment to continuous learning.\nPreferred Qualifications\nHands-on experience with Microsoft Entra ID, Active Directory, Azure, or Microsoft 365 administration.\nFamiliarity with identity and access management concepts, including authentication, authorization, provisioning, and identity governance.\nExperience supporting user accounts, permissions, enterprise applications, or access management processes.\nBasic experience with PowerShell, scripting, automation tools, or API integrations.\nFamiliarity with Microsoft Sentinel, Microsoft Defender, SIEM technologies, or security monitoring tools.\nExposure to SAML, OAuth, OpenID Connect, SCIM, LDAP, Kerberos, PKI, or certificate-based authentication.\nExperience working in environments with formal change management, incident management, compliance, or audit requirements.\nIndustry certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, Microsoft Certified: Azure Fundamentals, CompTIA Security+, CompTIA Network+, or equivalent.\nBelong, Connect and Grow at KBR\nAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.\nKBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.","description_format":"text","description_chars":7342,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Military Logistics","Space Services","Information Security","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-22T02:41:01Z"}],"visa":[],"liveness":{"score":1,"band":"cold","label":"Long shot","p_open":1,"p_active":0.05,"p_room":0.28,"age_days":100,"expected_fill_days":9,"reasons":["conf:24","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/kbr-associate-security-engineer-identity-security","json_url":"https://alion.io/job/kbr-associate-security-engineer-identity-security.json","meta":{"generated_at":"2026-10-25T06:24:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8826,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4344},"rest":"https://alion.io/mcp/rest/get_company?id=4344"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkbr-associate-security-engineer-identity-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkbr-associate-security-engineer-identity-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkbr-associate-security-engineer-identity-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kbr-associate-security-engineer-identity-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkbr-associate-security-engineer-identity-security"}]}