Sr. Security Analyst

Senior Security Analyst Job Number: 26-00356 Use your skills where innovative technology solutions begin. ECLARO is looking for a Senior Security Analyst for our client in Arlington, TX. ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview:

The Senior Security Analyst – Customer Identity & Access Management (CIAM) is a senior-level cybersecurity role responsible for securing, administering, and advancing the organization's customer-facing identity, authentication, and access platforms. This position serves as a subject matter expert for CIAM technologies supporting external users, applications, and digital services, while also contributing to broader security operations including but not limited to vulnerability management, network security, email security, and privileged access management (PAM).

This role requires deep technical expertise in large-scale identity systems, strong operational ownership, and the ability to lead complex security initiatives and investigations independently. The Senior Security Analyst will work closely with application teams, IT Operations, Infrastructure, Network, and Risk teams to ensure secure, scalable, and compliant customer identity solutions and will participate in an established on-call rotation. Pay Rate: $65.00-$70.00/Hour Responsibilities:
Customer Identity & Access Management (CIAM) – Primary Focus:
Design, implement, manage, and secure Customer Identity and Access Management (CIAM) solutions supporting external users, customers, and digital applications. Administer and support Ping Identity platforms, including customer authentication services, federation, SSO, OAuth/OIDC flows, and secure access integrations. Ping Directory – on premise Ping Federate – on premise Ping One MFA – cloud based Design, deploy, and support enterprise Multi-Factor Authentication (MFA) solutions for customer-facing applications and services.

Secure the customer identity lifecycle, including registration, authentication, authorization, account recovery, and de-provisioning. Investigate, respond to, and remediate customer identity-related security incidents, fraud activities, authentication abuse, and anomalous access behavior. Active Directory & Directory Services:
Provide security-focused administration and support for Microsoft Active Directory as part of the organization's overall identity and access strategy. Manage and secure Active Directory objects, authentication mechanisms, service accounts, group-based access, and privileged identities. Support directory services security, including account lifecycle management, access reviews, privilege enforcement, and authentication troubleshooting. Partner with Infrastructure and Operations teams on Active Directory hardening, access control standards, and identity security best practices.

Participate in investigations involving directory services, including credential compromise, privilege misuse, and identity-driven attack activity. Privileged Access Management (PAM):
Administer and oversee privileged access controls across CIAM platforms, Active Directory, service accounts, and administrative roles. Enforce least-privilege access and role-based access controls for enterprise identity systems. Monitor privileged activity, logging, and alerting, and support forensic analysis and incident response. Provide access control reporting and audit evidence when required. Vulnerability Management Support enterprise vulnerability management activities across identity platforms, directory services, authentication infrastructure, and supporting systems.

Analyze vulnerabilities impacting identity and access controls and coordinate remediation with Application, Infrastructure, and Security teams. Network & Email Security Support:
Support identity-related network security integrations, including authentication dependencies for VPNs, secure access, and protected service endpoints. Assist with investigations related to credential abuse,…