# Identity Security Engineer

**Company**: IT Infrastructure
**Location**: Miami, Florida
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://mlp.eightfold.ai/careers/job/755959049181?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_94491a03-8a7

## Description

### Job Overview

We are seeking an Identity Security Engineer to join our Information Technology team at Millennium, a global alternative investment firm. As an Identity Security Engineer, you will play a critical role in protecting Millennium's information and computer systems from internal and external threats.

### Responsibilities

- Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities.

- Design, build, and maintain authentication platforms across on-premises and cloud environments.

- Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls.

- Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders.

- Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap.

- Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening.

- Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies.

- Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code.

### Requirements

- 5+ years of relevant technical experience, including 3+ years focused on information security.

- Bachelor’s degree in Computer Science, Engineering, or a related field.

- Experience with PingFederate and Entra ID.

- Experience managing IaaS and SaaS solutions and services through CI/CD pipelines.

- Strong understanding of modern authentication protocols and associated identity security controls.

- Experience with Microsoft 365 security controls.

- Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance.

- Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus.

## Skills

### Required
- PingFederate
- Entra ID
- SAML
- OpenID Connect
- OAuth 2.0
- Kerberos
- Microsoft 365 security controls
- Azure Information Protection
- EDR
- SIEM
- vulnerability management

### Nice to have
- financial services experience

---

Source: [Apply at mlp.eightfold.ai](https://mlp.eightfold.ai/careers/job/755959049181?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)