Identity Security Engineer
Cloud Platforms
Data Security
Facilities Management
Identity and Access Management
Identity Federation
Identity Security
Identity Security Posture Management
Information Security
InfoSec
Management
Microsoft Entra Id Security
Microsoft Identity
Oauth 2.0
Openid Connect
Pki
Project Management
Risk Management
SAML
Security
Security Automation
Security Compliance
Security Engineer
Security Engineering
Security Operations
Security Standards
Single Sign On
Solution Architecture
Systems Security Engineer
Job Description
Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering support for identity security solutions and authentication platforms spanning on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk assessment, incident support, and reliable transition of engineered controls into production operations.
Key Responsibilities
- Deliver security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, including analysis, design, and development of new capabilities.
- Design, build, and maintain authentication platforms across both on-premises and cloud environments.
- Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls.
- Evaluate identity management risks by producing threat analyses and remediation plans for technical and business stakeholders.
- Monitor emerging security and privacy technologies, trends, and threats aligned to key business initiatives, and recommend approaches that inform the identity security roadmap.
- Support identity-focused workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening.
- Collaborate with Technology, Trading, Legal, Internal Audit, and Compliance to implement and enforce identity and access security policies.
- Transition solutions from engineering to production by maintaining documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code.
Required Qualifications
- 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred.
- Bachelor’s degree in Computer Science, Engineering, or a related field.
- Experience with PingFederate and Entra ID.
- Experience managing IaaS and SaaS solutions and services through CI/CD pipelines.
- Strong understanding of modern authentication protocols and identity security controls.
- Experience with Microsoft 365 security controls.
- Experience implementing data loss prevention and Azure Information Protection, including data classification, labeling, encryption, and regulatory compliance.
- Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus.
Technology Focus
- Identity and authentication: PingFederate, Entra ID, SAML, OpenID Connect, OAuth 2.0, Kerberos, PKI, single sign-on
- Delivery and operations: CI/CD, IaaS, SaaS, infrastructure as code, scripting
- Security and governance: Microsoft 365 security controls, data loss prevention, Azure Information Protection, EDR, SIEM, vulnerability management
Location and Work Model
Miami, FL (onsite)
Similar Jobs
