SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 140,000 - 200,000 / annual
CHAOS Industries is a defense technology company founded in 2022 and backed by $1 billion in funding from 8VC, Accel, and Valor Equity Partners. The company develops multi-product solutions powered by Coherent Distributed Networks (CDN) for warfighters, commercial air operators, and border protection teams.
You will own the identity and access management layer protecting CHAOS's Controlled Unclassified Information and export-controlled technical data. Your primary goal is to make the company's Identity Provider (IdP), IAM, Privileged Access Management (PAM), Privileged Identity Management (PIM), and Secrets Management platforms work as one coherent system that meets CMMC Level 2, NIST SP 800-171, DFARS 252.204-7012, and ITAR compliance requirements while remaining usable.
You will work alongside security operations, IT, HR, and compliance to turn policy into working access controls, from onboarding through offboarding. This is a hands-on role with real influence over identity architecture decisions.
Key Responsibilities:
- Design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services
- Own and automate the IAM portion of joiner, mover, and leaver (JML) processes across identity, directory, cloud, and secrets platforms
- Design and tune authentication policies, conditional access, phishing-resistant MFA, and device compliance requirements
- Build identity-focused detections and threat hunts in SIEM, EDR, and SOAR tools; support SOC during identity-related investigations
- Operate and mature a tiered administrative model, including privileged access workstations (PAWs) and dedicated administrator accounts
- Administer privileged identity management for just-in-time role activation and privileged access reviews
- Administer enterprise password and secrets management platform, including role-based enforcement policies, vault structure, SSO integration, and vaulting of privileged and shared credentials
- Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation
- Integrate SaaS and internal applications with SSO through SAML and OpenID Connect, and with SCIM for automated provisioning
- Maintain Active Directory security, including account lifecycle hygiene, service accounts and group Managed Service Accounts (gMSAs), and ongoing attack path analysis
- Run periodic access reviews and produce assessment evidence for NIST SP 800-171 Access Control (AC) and Identification and Authentication (IA) families
- Write and maintain IAM policies, standards, and procedures
Requirements:
- Bachelor's degree in computer science, cybersecurity, information security, IT, Information Assurance, or related field with 5+ years of progressively responsible cybersecurity engineering experience; OR Master's degree with 3+ years of relevant experience
- At least 2 years of experience focused on IAM
- Hands-on experience administering an IdP in a production environment
- Hands-on experience administering Entra ID or Active Directory
- Experience running provisioning, access change, and deprovisioning steps of a JML process
- Experience designing authentication policies and deploying phishing-resistant MFA across an organization
- Working knowledge of Kerberos, LDAP, and SAML
- Experience with cloud IAM (AWS IAM, Azure RBAC, or GCP IAM)
- Experience with secrets management platforms (HashiCorp Vault, CyberArk, or similar)
- Experience with Active Directory attack path analysis tools such as BloodHound or PingCastle
- Proficiency in a query language such as Elasticsearch Query Language (EQL), Kusto Query Language (KQL), or similar
- Experience deploying certificate-based authentication or FIDO2 security keys
- A relevant certification such as Microsoft Certified: Identity and Access Administrator Associate (SC-300) or CISSP
- Experience working in the Defense Industrial Base (DIB)
