Security Engineer – Identity and Access Management; IAM

Simply put, we are one of the nation’s largest independent, privately held firms specializing in employee benefits, retirement plans, and all their associated compliance needs. Since 2008, we have grown by acquiring over 60 local and national firms that have been trusted members of their communities for decades. We hold the coveted “Best Places to Work – USA,” certification and serve more than 22,000 employer groups and 3.6 million plan participants nationally.

Daybright Financial also operates a dedicated independent divisional team,
Daybright Broker Solutions
, to further enhance the services, support, and marketing resources to grow the businesses of benefits brokers and consultants and enable professional employer organizations (PEOs) to bring more to the table for their clients — through the seamless delivery of Fortune 500-level health and financial wellness solutions.

For more information on Daybright Financial, visit . Follow Daybright on Linked In
, Instagram
, Facebook
, and You Tube
.

Daybright is currently seeking a Security Engineer – Identity and Access Management (IAM) to join our Corporate Office. Be part of a team of thought leaders and seasoned benefits and retirement planning professionals.

The Security Engineer - Identity and Access Management (IAM) supports Daybright Financial's identity and access management program by administering access controls, monitoring identity-related risk, and improving joiner-mover-leaver and access governance processes. This role partners with Security, IT, HR, Compliance, and application owners to ensure users receive the right access at the right time for the right reasons. The Security Engineer - IAM combines operational execution and continuous improvement to strengthen security, reduce access risk, and support regulatory requirements.

• Execute identity lifecycle operations for joiner, mover, and leaver events with accuracy and timeliness.
• Administer role-based and attribute-based access controls across enterprise systems and cloud services.
• Support access request, approval, and provisioning workflows, including documentation of exceptions.
• Perform periodic access reviews and certification activities with system owners and control stakeholders.
• Investigate and resolve identity and access incidents, including excessive privileges, orphaned accounts, and policy violations.
• Monitor IAM controls and metrics, escalating risks and control gaps to appropriate teams.
• Support privileged access management processes, including privileged account onboarding and control adherence.
• Contribute to segregation of duties analysis and remediation planning with business and control owners.
• Maintain IAM process documentation, runbooks, and control evidence for audits and assessments.
• Partner with IAM engineering and platform teams to improve automation, quality, and service reliability.

• 5-7 years of experience in identity and access management, security operations, or related IT control functions.
• Experience with Microsoft Entra , Privileged Identity Management, Lifecycle Workflows, and related Microsoft technologies.
• Understanding of authentication, authorization, directory services, federation, and least-privilege principles.
• Experience with access provisioning, deprovisioning, and periodic access certification processes.
• Familiarity with ticketing/workflow systems and disciplined case management.
• Strong analytical and problem-solving skills with attention to detail and data accuracy.
• Strong communication and collaboration skills across technical and non-technical stakeholders.
• Experience in financial services or another regulated environment preferred.
• Experience with IAM governance tools, identity providers, and privileged access management platforms preferred.
• Familiarity with standards and frameworks such as NIST, ISO 27001, and SOX-related access control expectations preferred.
• Experience with basic scripting or automation concepts to improve IAM workflows preferred.
• Experience participating in internal or external audits and control testing preferred.
• Relevant certifications or equivalent practical expertise in IAM, cybersecurity, or governance domains preferred.