Identity Security Engineer

Job Overview

We are seeking an Identity Security Engineer to join our Information Technology team at Millennium, a global alternative investment firm. As an Identity Security Engineer, you will play a critical role in protecting Millennium's information and computer systems from internal and external threats.

Responsibilities

• Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities.
• Design, build, and maintain authentication platforms across on-premises and cloud environments.
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls.
• Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders.
• Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap.
• Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening.
• Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies.
• Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code.

Requirements

• 5+ years of relevant technical experience, including 3+ years focused on information security.
• Bachelor’s degree in Computer Science, Engineering, or a related field.
• Experience with PingFederate and Entra ID.
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines.
• Strong understanding of modern authentication protocols and associated identity security controls.
• Experience with Microsoft 365 security controls.
• Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance.
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus.