Identity Security Engineer
Cloud Platforms
Data Security
Engineer
Facilities Management
Identity and Access Management
Identity Federation
Identity Security
Identity Security Posture Management
Information Security
InfoSec
Management
Microsoft Entra Id Security
Microsoft Identity
Oauth 2.0
Openid Connect
Pki
Project Management
Risk Management
SAML
Security
Security Automation
Security Compliance
Security Engineer
Security Engineering
Security Operations
Security Standards
Single Sign On
Solution Architecture
Systems Security Engineer
Job Description
Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering for identity security solutions and authentication platforms across on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk analysis, incident support, and moving security capabilities into production through automation.
Responsibilities
- Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, supporting analysis, design, and development of new capabilities
- Design, build, and maintain authentication platforms spanning on-premises and cloud environments
- Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and associated security controls
- Assess identity management risks and deliver threat analyses and remediation plans for both technical and business stakeholders
- Evaluate emerging security and privacy technologies, trends, and threats aligned to key business initiatives, then recommend approaches that inform the identity security roadmap
- Support identity-focused workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
- Coordinate with Technology, Trading, Legal, Internal Audit, and Compliance teams to implement and enforce identity and access security policies
- Transition solutions from engineering into production, maintain documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code
Requirements
- 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
- Bachelor’s degree in Computer Science, Engineering, or a related field
- Experience with PingFederate and Entra ID
- Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
- Strong understanding of modern authentication protocols and identity security controls
- Experience with Microsoft 365 security controls
- Experience implementing data loss prevention and Azure Information Protection, including data classification, labeling, encryption, and regulatory compliance
- Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus
Location
Miami, FL (onsite)
Technology Focus
- PingFederate, Entra ID
- SAML, OpenID Connect, OAuth 2.0, Kerberos
- PKI, single sign-on
- CI/CD, IaaS, SaaS, infrastructure as code
- Microsoft 365 security controls
- Data loss prevention, Azure Information Protection
- EDR, SIEM, vulnerability management
Similar Jobs
