Microsoft Identity Engineer Jobs

2 jobs found

Today

Identity Security Engineer

Millennium Management Miami, FL

Miami, FL

Today

Full time Cloud Platforms Data Security Facilities Management

Apply Now

Job Description

Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering support for identity security solutions and authentication platforms spanning on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk assessment, incident support, and reliable transition of engineered controls into production operations.

Key Responsibilities

Deliver security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, including analysis, design, and development of new capabilities.
Design, build, and maintain authentication platforms across both on-premises and cloud environments.
Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls.
Evaluate identity management risks by producing threat analyses and remediation plans for technical and business stakeholders.
Monitor emerging security and privacy technologies, trends, and threats aligned to key business initiatives, and recommend approaches that inform the identity security roadmap.
Support identity-focused workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening.
Collaborate with Technology, Trading, Legal, Internal Audit, and Compliance to implement and enforce identity and access security policies.
Transition solutions from engineering to production by maintaining documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code.

Required Qualifications

5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred.
Bachelor’s degree in Computer Science, Engineering, or a related field.
Experience with PingFederate and Entra ID.
Experience managing IaaS and SaaS solutions and services through CI/CD pipelines.
Strong understanding of modern authentication protocols and identity security controls.
Experience with Microsoft 365 security controls.
Experience implementing data loss prevention and Azure Information Protection, including data classification, labeling, encryption, and regulatory compliance.
Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus.

Technology Focus

Identity and authentication: PingFederate, Entra ID, SAML, OpenID Connect, OAuth 2.0, Kerberos, PKI, single sign-on
Delivery and operations: CI/CD, IaaS, SaaS, infrastructure as code, scripting
Security and governance: Microsoft 365 security controls, data loss prevention, Azure Information Protection, EDR, SIEM, vulnerability management

Location and Work Model

Miami, FL (onsite)

View full job page →

3d ago

Senior Cybersecurity Engineer, Identity & Access Management

CHAOS Industries El Segundo, CA

El Segundo, CA

3d ago

$140k - $200k/yr Full time Senior Cloud Identity And Access Management Iam Identity Automation

Apply Now

Job Description

CHAOS Industries is seeking a Senior Cybersecurity Engineer to lead Identity and Access Management (IAM) responsibilities for protecting Controlled Unclassified Information and export-controlled technical data. This onsite role in El Segundo, CA focuses on designing, operating, and maturing identity-layer controls and detections across cloud and on-premises environments.

Identity & Access Management Responsibilities

In this role, you will design, build, and maintain identity architecture and role-based access control (RBAC) across cloud and on-premises directory services, translating security policy into operational access controls throughout the employee lifecycle.

Design, build, and maintain identity architecture and RBAC across cloud and on-premises directory services.
Own and automate the IAM portion of the joiner, mover, and leaver (JML) process across identity, directory, cloud, and secrets platforms to provision access at hire, adjust access when roles change, and revoke promptly at departure.
Coordinate with human resources and IT to align on the employee record and device steps, which those groups own.
Design and tune authentication policies, conditional access controls, phishing-resistant multi-factor authentication (MFA), and device compliance requirements.
Build identity-focused detections and threat hunts in the company’s SIEM, EDR, and SOAR tooling and support the security operations center (SOC) during identity-related investigations.
Operate and mature a tiered administrative model, including privileged access workstations (PAWs) and dedicated administrator accounts.
Administer privileged identity management for just-in-time role activation and privileged access reviews.
Administer an enterprise password and secrets management platform, including role-based enforcement policies, vault structure, SSO integration, and vaulting of privileged and shared credentials.
Manage cloud infrastructure IAM, including role assignments, service identities, and workload identity federation.
Integrate SaaS and internal applications with single sign-on (SSO) using SAML and OpenID Connect, and automate provisioning using SCIM.
Maintain Active Directory security, including account lifecycle hygiene, service accounts and group Managed Service Accounts (gMSAs), and ongoing attack path analysis.
Run periodic access reviews and produce assessment evidence for NIST SP 800-171 (Access Control and Identification and Authentication families).
Write and maintain IAM policies, standards, and procedures.

Required Qualifications

Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, Information Technology, Information Assurance, or a related field, with 5+ years of progressively responsible cybersecurity engineering experience, or a Master’s degree with 3+ years of relevant experience.
At least two years of experience focused on IAM.
Hands-on experience administering an IdP in a production environment.
Hands-on experience administering Entra ID or Active Directory.
Experience running provisioning, access change, and deprovisioning steps of a JML process.
Experience designing authentication policies and deploying phishing-resistant MFA across an organization.
Working knowledge of Kerberos, NTLM, LDAP, SAML, OAuth 2.0, OpenID Connect, and SCIM.
Scripting experience in PowerShell, Python, or a comparable language, including work with identity provider APIs.
Familiarity with NIST SP 800-207, Zero Trust Architecture, and NIST SP 800-171 or NIST SP 800-53.
Experience producing compliance evidence for NIST SP 800-171, CMMC, FedRAMP, or a comparable framework.
Clear written communication for technical runbooks and policy documents.

Preferred Qualifications

Experience with IAM in a cloud platform such as Microsoft Azure or AWS.
Experience administering an enterprise password or secrets management platform.
Experience with identity automation platforms.
Experience with Microsoft 365 GCC High or another US government cloud environment.
Experience implementing PIM, PAWs, or a tiered administrative model.
Experience with Active Directory attack path analysis tools such as BloodHound or PingCastle.
Proficiency in a query language such as Elasticsearch Query Language (ES|QL), Kusto Query Language (KQL), or similar.
Experience deploying certificate-based authentication or FIDO2 security keys.
A relevant certification, such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), or CISSP.
Experience working in the Defense Industrial Base (DIB).

Tools & Technologies

PowerShell, Python
Kerberos, NTLM, LDAP
SAML, OAuth 2.0, OpenID Connect, SCIM
Entra ID, Active Directory
BloodHound, PingCastle
Elasticsearch Query Language (ES|QL), Kusto Query Language (KQL)

Location and Compensation

This position is based in El Segundo, CA (onsite). Salary range is USD 140,000 - 200,000 per year.

Benefits

Medical, dental, and vision benefits 100% paid for by the company
401k with +50% company match up to 6% of pay
FSA and HSA
Life insurance
Free daily lunch while working onsite
Fully-stocked kitchen
Unlimited PTO
Casual dress code
Competitive base salaries
Generous pre-IPO stock option grants
Relocation assistance
Annual bonuses (coming soon)

View full job page →

Get Microsoft Identity Engineer Jobs alerts

New Microsoft Identity Engineer Jobs, daily.