**Description**
**About Us:**
EMCOR Group, Inc. (NYSE: EME) is a Fortune 500 company and a leader in mechanical and electrical construction, industrial and energy infrastructure, and building services.
A provider of critical infrastructure systems. EMCOR gives life to new structures and sustains life in existing ones by it planning, installing, operating, maintaining, and protecting the sophisticated and dynamic systems that create facility environments. This includes electrical, mechanical, lighting, air conditioning, heating, security, fire protection, and power generation systems--in virtually every sector of the economy and for a diverse range of businesses, organizations and government. EMCOR represents a rare combination of broad reach with local execution, combining the strength of an industry leader with the knowledge and care of 170 locations.
**Job Title:** -- Security Analyst - Identity and Access Management
**Job Summary:** -- The Security Analyst for Identity and Access Management (IAM) is responsible for supporting EMCOR's Security Program with a focus on identity systems, single sign-on (SSO), and user lifecycle management. This role also plays a key part in administering Microsoft Sentinel and Defender, using Kusto Query Language (KQL) to enhance threat detection, automate response, and strengthen the organization's overall security posture.
**Essential Duties and Responsibilities:** --
+ Support and monitor the enterprise information security system as directed by management.
+ Manage daily operations and support for IAM products, including incident and ticket resolution.
+ Administer Entra ID, with expertise in SSO, Conditional Access, and modern authentication methods.
+ Deploy and maintain IAM systems for user life-cycle, access governance, and PAM.
+ Investigate and resolve IAM security incidents using established tools and procedures.
+ Provide expertise during incidents, document findings, and help improve protocols.
+ Help design, implement, and maintain Microsoft Sentinel and Defender security monitoring, including custom KQL queries and automation.
+ Collaborate with security and IT teams to enhance IAM maturity and awareness.
+ Maintain and upgrade servers and applications supporting security tools.
+ Monitor emerging threats and advise stakeholders on responses.
+ Perform special projects as needed.
**Qualifications:** --
+ A minimum of five years' experience with Microsoft Active Directory, preferably within a multi-domain environment.
+ At least three years' experience working with Microsoft Entra ID.
+ A minimum of two years' experience utilizing the Microsoft Defender Platform and/or Microsoft Sentinel.
+ At least one year's experience with Privileged Access Management systems.
+ Demonstrated proficiency in using PowerShell for administration and automation purposes.
+ Practical experience and/or comprehensive understanding of one or more of the following technologies: MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.
+ Proven ability to communicate effectively and interact professionally with personnel at all organizational levels.
+ Strong project management capabilities.
+ Ability to consistently deliver an exceptional standard of customer service.
Notice to prospective employees: There have been fraudulent postings and emails regarding job openings. EMCOR Group and its companies list open positions here ( . Please check our available positions to confirm that a post or email is genuine.
EMCOR Group and its companies do not reach out to individuals to help with marketing or other similar services. If an individual is contacted for services outside of EMCOR's normal application process - it is probably fraudulent.
**As a leading provider of mechanical and electrical construction, facilities services, and energy infrastructure, we** **offer employees a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and success. Equal Opportunity Employer/Veterans/Disabled**
**Benefits: We are** **committed to providing employees a comprehensive benefits package which includes medical, dental, and vision coverage, along with health savings and flexible spending accounts, life insurance, disability, a 401(k) Savings Plan, College Coach and employee assistance program.**
**\#emcor**
**\#LI-MJ1**
**Qualifications**
**Education**
**Required**
+ High School or better
**Experience**
**Preferred**
+ 5 years: A minimum of five years' experience with Microsoft Active Directory, preferably within a multi-domain environment.
+ 3 years: At least three years' experience working with Microsoft Entra ID.
+ 2 years: A minimum of two years' experience utilizing the Microsoft Defender Platform and/or Microsoft Sentinel.
+ 1 year: At least one year's experience with Privileged Access Management systems.
+ Demonstrated proficiency in using PowerShell for administration and automation purposes.
+ Practical experience and/or comprehensive understanding of one or more of the following technologies: MFA, SSO, SAML, OAuth, OpenID, SCIM, and REST API.
Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights ( notice from the Department of Labor.