Security Hardening - identity/access/hardening
DeWinter BH ·www.dewintergroup.com
Apply direct
Title: IT Security Hardening Specialist
Job Type: Contract
Contract Length: TBD (Engagement-based)
Pay Range: $80–$100/hour
Start Date: To be determined
Location: 100% Remote
About the Opportunity:
Our client, a leader in cloud infrastructure and technology, is seeking two experienced IT Security Hardening Specialists to join their team for a critical 6-month+ engagement. This project focuses on executing a comprehensive security hardening program across hundreds of applications and cloud services. The objective is to move the company’s estate to a defensible, consistent security standard by enforcing SSO, eliminating standing admin privileges, and validating comprehensive logging. This is a high-impact role that requires a self-motivated security professional who can hit the ground running to execute systematic, evidence-based security improvements.
Key Responsibilities & Deliverables:
This role is focused on the successful execution of identity and application hardening initiatives. Your responsibilities will include:
We are looking for candidates with a proven track record in identity security and SaaS administration. The ideal candidate will have:
Job Type: Contract
Contract Length: TBD (Engagement-based)
Pay Range: $80–$100/hour
Start Date: To be determined
Location: 100% Remote
About the Opportunity:
Our client, a leader in cloud infrastructure and technology, is seeking two experienced IT Security Hardening Specialists to join their team for a critical 6-month+ engagement. This project focuses on executing a comprehensive security hardening program across hundreds of applications and cloud services. The objective is to move the company’s estate to a defensible, consistent security standard by enforcing SSO, eliminating standing admin privileges, and validating comprehensive logging. This is a high-impact role that requires a self-motivated security professional who can hit the ground running to execute systematic, evidence-based security improvements.
Key Responsibilities & Deliverables:
This role is focused on the successful execution of identity and application hardening initiatives. Your responsibilities will include:
- Identity & Access Hardening: Identify and eliminate standing administrator access, close local "back-door" accounts that bypass SSO/MFA, and harden access governance platforms (Okta, Opal).
- Application Hardening: Systematically harden a portfolio of applications by enforcing single sign-on (SSO), standardizing security groups, and right-sizing roles (RBAC) according to a consistent 8-step security checklist.
- Logging Validation: Configure and validate application logs into the SIEM to ensure continuous coverage and audit-readiness.
- Process Execution: Execute tasks tracked in Jira, ensuring each item has a clear definition of done and documented evidence.
- Stakeholder Collaboration: Work alongside internal IT, Security teams, and application owners to resolve access issues and decommission non-essential test/dormant applications.
We are looking for candidates with a proven track record in identity security and SaaS administration. The ideal candidate will have:
- 3+ years of experience in security engineering, IT operations, or identity management.
- Deep expertise in Okta (SSO/IdP), SAML/SCIM integrations, and access governance tools (e.g., Opal).
- Experience with privileged access management and implementing "just-in-time" (JIT) access models.
- Familiarity with Workday as an authoritative HRIS source is a strong plus.
- Demonstrated ability to work autonomously, manage complex technical checklists at scale, and maintain detailed documentation in Jira.
- Strong communication skills to effectively collaborate with application owners and internal security stakeholders during the hardening process.
- Ability to participate in a 2–3 round interview process.
Frequently asked questions
Who is hiring for the Security Hardening - identity/access/hardening role?
DeWinter BH is hiring for the Security Hardening - identity/access/hardening position, a Shazamme client. Apply directly on the employer's career site.
Where is the Security Hardening - identity/access/hardening job located?
The Security Hardening - identity/access/hardening role with DeWinter BH is based in Sunnyvale, US. The role is remote-friendly.
Is the Security Hardening - identity/access/hardening role remote?
Yes — the Security Hardening - identity/access/hardening position at DeWinter BH is remote. Candidates based in US are preferred.
What does the Security Hardening - identity/access/hardening role pay?
DeWinter BH lists the Security Hardening - identity/access/hardening role at USD 80–100 per hour.
Is the Security Hardening - identity/access/hardening role full-time or contract?
This is a full time position at DeWinter BH.
What experience level is the Security Hardening - identity/access/hardening role?
The Security Hardening - identity/access/hardening position is aimed at mid-level candidates.
How do I apply for the Security Hardening - identity/access/hardening role at DeWinter BH?
Apply directly on DeWinter BH's career page via the Apply button on this listing. ZammeJobs links straight through to the employer's ATS — no third-party form, no resume database.