Millennium Management is seeking an Identity Security Engineer to lead security consulting and engineering for Microsoft identity platforms, along with authentication and access controls spanning on-premises and cloud environments. The role focuses on authentication platform strategy, identity risk assessment, and leading identity security workstreams during security incidents.
Role Overview
The Identity Security Engineer will provide technical direction for designing and delivering identity security capabilities across Windows, Active Directory, Entra ID, and related authentication and access solutions. The position also involves shaping a long-term identity security roadmap and partnering with internal stakeholders to govern and enforce identity and access security policies.
Responsibilities
- Lead security consulting and engineering for Windows, Active Directory, Entra ID, and related identity security solutions, establishing technical direction for the design and development of new capabilities
- Define and execute the vision, strategy, architecture, and implementation of authentication platforms across on-premises and cloud environments
- Act as a technical authority on SAML, OpenID Connect, OAuth 2.0, and Kerberos, including single sign-on, PKI, and associated identity controls
- Assess identity management risks and threats, and communicate remediation plans to senior technical and business stakeholders
- Contribute to the identity security roadmap by evaluating emerging security and privacy technologies, trends, and threats against key business initiatives
- Lead identity-related workstreams during information security incidents, including containment, root-cause analysis, and post-incident hardening
- Partner with senior stakeholders across Technology, Trading, Legal, Internal Audit, and Compliance to define, govern, and enforce identity and access security policies
- Establish production-readiness, documentation, and operational standards for identity security solutions, and mentor junior and mid-level security engineers
Requirements
- 10+ years of experience in a technical role, including 5+ years focused on information security; financial services experience is preferred
- Bachelor’s degree in Computer Science, Engineering, or a related field
- Strong experience engineering Microsoft security solutions across desktop and server operating systems, Entra ID, Active Directory, Group Policy, Desired State Configuration, DNS, and collaboration platforms
- Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
- Strong understanding of modern authentication protocols and associated identity security controls
- Experience with Microsoft 365 security controls, including Entra ID, Conditional Access, and Foundry
- Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
- Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus
Technologies
Windows, Active Directory, Entra ID, SAML, OpenID Connect, OAuth 2.0, Kerberos, single sign-on, PKI, IaaS, SaaS, CI/CD, Microsoft 365, Conditional Access, Foundry, data loss prevention, Azure Information Protection, data classification, labeling, encryption, EDR, SIEM, vulnerability management, Group Policy, Desired State Configuration, DNS, collaboration platforms.
Location
New York, NY (onsite)
Compensation and Benefits
Estimated base salary range: USD 175,000 - 250,000 per year (specific to New York City and may change in the future).
- Base salary
- Discretionary performance bonus
- Comprehensive benefits
