Cyber Security Identity Engineer

Simon Property Group; Indianapolis (IN); On-site; USD 110,000 - 160,000; Full time

Job summary

Simon Property Group seeks a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management across cloud, on‑premises, and hybrid environments. You will strengthen authentication, governance, and Zero Trust while improving reliability of identity services.

Responsibilities include implementing Entra ID and Active Directory, optimizing authentication methods, provisioning lifecycles, and integrating with monitoring and risk tools.

Qualifications

• Bachelor’s degree in a related field or equivalent experience.

Responsibilities

• Design, implement, and support Microsoft Entra ID, Active Directory, hybrid identity, directory synchronization, and related services.

Skills

Microsoft Entra ID

Active Directory

Identity governance

Multi-factor auth

Just-in-time access

PowerShell

Microsoft Graph

APIs & automation

Education

Bachelor’s degree in Cyber Security

Tools

CyberArk

BeyondTrust

Delinea

SailPoint

Saviynt

Job description

Job Location: Corporate Indianapolis

Simon Property Group is seeking a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management services across cloud, SaaS, on-premises, and hybrid environments. Working across Cyber Security, technology, Human Resources, and business teams, this role strengthens authentication, identity governance, privileged access, and Zero Trust controls while improving the reliability and usability of identity services.

Primary Responsibilities

• Design, implement, and support Microsoft Entra ID, Active Directory, hybrid identity, directory synchronization, and related enterprise identity services.
• Engineer authentication and access controls, including multi-factor and passwordless authentication, Single Sign-On, federation, Conditional Access, and secure application integrations.
• Develop secure identity patterns for users, administrators, service accounts, application identities, and external partners while advancing Zero Trust and reducing legacy authentication.
• Strengthen identity lifecycle and governance processes, including provisioning, transfers, deprovisioning, role-based access, entitlement management, access reviews, and separation-of-duties controls.
• Engineer privileged access controls using just-in-time activation, approval workflows, time-bound access, strong authentication, and standards for administrative, emergency, and service accounts.
• Monitor identity platforms for suspicious activity, risky access, privilege misuse, and configuration weaknesses; partner with Security Operations to investigate and remediate identity-related incidents.
• Integrate identity events and risk signals with Microsoft Sentinel, Microsoft Defender, and related monitoring platforms, and support audits, assessments, compliance, and risk remediation.
• Automate provisioning, reviews, reporting, and remediation using PowerShell, Microsoft Graph, APIs, and related technologies.
• Maintain reliable identity platforms, troubleshoot complex access issues, document standards and procedures, evaluate emerging practices, and communicate risks and recommendations to stakeholders.

Required Qualifications

• Bachelor’s degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent education and experience.
• 5+ years of progressive experience in identity and access management, security engineering, infrastructure security, systems integration, or a related technical discipline.
• Hands-on experience with Microsoft Entra ID, Active Directory, identity synchronization, hybrid identity, multi-factor authentication, Conditional Access, Single Sign-On, federation, role-based access, and identity lifecycle processes.
• Working knowledge of SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate-based authentication, Zero Trust, privileged access, and access governance.
• Experience with PowerShell, Microsoft Graph, APIs, or comparable scripting and automation technologies.
• Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Advanced experience with Microsoft Entra ID Protection and Governance, Conditional Access, Privileged Identity Management, entitlement management, or passwordless authentication.
• Experience with privileged access or identity governance platforms such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, or comparable technologies.
• Experience securing Microsoft 365, Azure, SaaS and enterprise applications, integrating HR systems with identity processes, and supporting security monitoring, audits, or regulatory requirements.
• Relevant Microsoft, identity, or security certification, such as Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP, or Security+.

Simon® is a real estate investment trust engaged in the ownership of premier shopping, dining, entertainment and mixed-use destinations (Simon Property Group, NYSE: SPG). Our properties across North America, Europe and Asia provide community gathering places for millions of people every day and generate billions in annual sales. In addition to our high quality properties, Simon is also known for our strong balance sheet, a long-tenured and well-respected senior management team, and our innovative spirit, as reflected in a 50 + year history of successful retail real estate development, management, and leasing. Simon was named Fortune’s Most Admired Real Estate Company eight times. We have experienced an explosion of growth and innovation unprecedented in the industry and we look forward to Simon's future.

Simon is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. If you require assistance or need to request an accommodation due to a disability, please email [e-mail]. Please note this email is intended only for accommodation requests related to the application and interview process. Any other correspondence will not receive a response.