Cyber Security Identity Engineer

simon; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

Simon Property Group seeks a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management across cloud, SaaS, on-premises, and hybrid environments.

You will strengthen authentication, governance, privileged access, and Zero Trust controls while improving reliability and usability of identity services, collaborating with Cyber Security, technology, HR, and business teams.

Qualifications

• Bachelor's degree or equivalent in a related discipline.
• 5+ years in identity and access management or security engineering.
• Hands-on with Entra ID, AD, hybrid identity, MFA, CA, SSO, federation, lifecycle processes.

Responsibilities

• Design, implement, and support Entra ID, AD, and hybrid identity services.
• Engineer MFA, passwordless, SSO, federation, Conditional Access.
• Develop identity patterns for users, admins, service accounts, and partners with Zero Trust.
• Strengthen identity governance: provisioning, transfers, deprovisioning, access reviews, separation of duties.
• Engineer privileged access controls with just-in-time activation and strong authentication.
• Monitor identity platforms for suspicious activity and incidents; work with SOC.
• Integrate identity events with Microsoft Sentinel/Defender and support audits.
• Automate provisioning, reviews, and remediation using PowerShell, Graph, and APIs.
• Maintain identity platforms and document standards; communicate risks to stakeholders.

Skills

Microsoft Entra ID

Active Directory

PowerShell

Microsoft Graph

APIs

Education

Bachelor's degree in Cyber Security / CS / IT / Engineering

Tools

SAML

OAuth 2.0

OpenID Connect

Job description

Job Location: Corporate Indianapolis

Simon Property Group is seeking a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management services across cloud, SaaS, on-premises, and hybrid environments. Working across Cyber Security, technology, Human Resources, and business teams, this role strengthens authentication, identity governance, privileged access, and Zero Trust controls while improving the reliability and usability of identity services.

Primary Responsibilities

• Design, implement, and support Microsoft Entra ID, Active Directory, hybrid identity, directory synchronization, and related enterprise identity services.
• Engineer authentication and access controls, including multi-factor and passwordless authentication, Single Sign-On, federation, Conditional Access, and secure application integrations.
• Develop secure identity patterns for users, administrators, service accounts, application identities, and external partners while advancing Zero Trust and reducing legacy authentication.
• Strengthen identity lifecycle and governance processes, including provisioning, transfers, deprovisioning, role-based access, entitlement management, access reviews, and separation-of-duties controls.
• Engineer privileged access controls using just-in-time activation, approval workflows, time-bound access, strong authentication, and standards for administrative, emergency, and service accounts.
• Monitor identity platforms for suspicious activity, risky access, privilege misuse, and configuration weaknesses; partner with Security Operations to investigate and remediate identity-related incidents.
• Integrate identity events and risk signals with Microsoft Sentinel, Microsoft Defender, and related monitoring platforms, and support audits, assessments, compliance, and risk remediation.
• Automate provisioning, reviews, reporting, and remediation using PowerShell, Microsoft Graph, APIs, and related technologies.
• Maintain reliable identity platforms, troubleshoot complex access issues, document standards and procedures, evaluate emerging practices, and communicate risks and recommendations to stakeholders.

Required Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent education and experience.
• 5+ years of progressive experience in identity and access management, security engineering, infrastructure security, systems integration, or a related technical discipline.
• Hands-on experience with Microsoft Entra ID, Active Directory, identity synchronization, hybrid identity, multi-factor authentication, Conditional Access, Single Sign-On, federation, role-based access, and identity lifecycle processes.
• Working knowledge of SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate-based authentication, Zero Trust, privileged access, and access governance.
• Experience with PowerShell, Microsoft Graph, APIs, or comparable scripting and automation technologies.
• Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Advanced experience with Microsoft Entra ID Protection and Governance, Conditional Access, Privileged Identity Management, entitlement management, or passwordless authentication.
• Experience with privileged access or identity governance platforms such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, or comparable technologies.
• Experience securing Microsoft 365, Azure, SaaS and enterprise applications, integrating HR systems with identity processes, and supporting security monitoring, audits, or regulatory requirements.
• Relevant Microsoft, identity, or security certification, such as Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP, or Security+.