Lead, Identity Engineer

Requirements

• 5+ years of experience in Privileged Identity Management and IAM .
• Strong hands-on expertise with: PIM products like CyberArc or similar Active Directory / Group Policy Azure AD / Entra ID Solid understanding of identity governance, Zero Trust, RBAC, and privileged access models.
• Experience with PowerShell scripting and automation.
• Familiarity with Conditional Access, MFA, and hybrid identity architectures.
• Microsoft Certified: Identity and Access Administrator (SC-300) Azure Administrator (AZ‑104) or Security Engineer (AZ‑500) certifications Experience with additional privileged access tools (CyberArk, BeyondTrust, etc.) Understanding of cloud security frameworks and IAM for Azure, AWS, or GCP Strong analytical and problem-solving abilities Excellent communication and documentation skills Ability to work independently and lead identity-focused initiatives Collaborative mindset with cross-functional teams We offer a competitive, family friendly total rewards package.
• We design our programs to reflect our commitment to an inclusive environment, while ensuring we provide benefits that meet the diverse needs of our employees.
• KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment.
• Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA .
• Please ensure that you have searched KLA’s Careers website for legitimate job postings.
• KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers.
• If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee.
• We take your privacy very seriously and confidentially handle your information.