Director, Azure Cloud / Entra ID Engineering / IAM

BNY; Pittsburgh (Allegheny County); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Generous paid leaves

Flexible global resources and tools

401(k) plan participation

Company-sponsored medical, dental, vision insurance

Job summary

BNY is looking for a Director of Azure Cloud to oversee the engineering and expansion of its Entra ID service, which is pivotal for secure workforce access and Microsoft 365 integration. This leadership role requires a candidate with extensive experience in Identity and Access Management, particularly with Microsoft Entra ID and Azure AD, and a strong orientation toward enhancing cybersecurity.

The successful candidate will design and improve identity services while collaborating extensively across departments to deliver optimal outcomes. Competitive benefits and rewards, alongside a culture that values excellence, further enhance this opportunity for growth within a leading global financial services firm.

Qualifications

• 12+ years of experience in information security or related technology.
• 3+ years of direct experience with Microsoft Entra ID or Azure AD.
• Strong analytical, problem-solving, and execution skills.

Responsibilities

• Support strategic expansion and engineering roadmap for Entra ID.
• Design and enhance identity services for Microsoft 365 applications.
• Drive improvements in authentication and access control.

Skills

Identity and Access Management

Authentication Engineering

Microsoft Entra ID

Azure AD

Analytical Skills

Communication Skills

Job description

Director, Azure Cloud / Entra ID Engineering / IAM

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting‑edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Key Responsibilities

• Support the strategic expansion and engineering roadmap for BNY’s Entra ID service.
• Design, implement, and enhance identity services that support Microsoft 365 and a broad portfolio of enterprise applications.
• Partner with cybersecurity, infrastructure, application, and workplace technology teams to deliver secure and scalable identity solutions.
• Drive improvements in authentication, access control, federation, directory services, lifecycle management, and enterprise identity integrations.
• Help define and implement operational standards, platform controls, and service reliability practices for Entra ID.
• Contribute to the delivery of critical IAM initiatives, including modernization, automation, and risk reduction efforts.
• Ensure solutions align with cybersecurity standards, IAM controls, and enterprise architecture requirements.
• Support issue resolution, platform stability, service optimization, and continuous improvement across the identity environment.
• Participate in strategic planning, platform governance, and prioritization of high-impact identity capabilities.
• Mentor team members and contribute to a strong engineering and risk‑aware culture across the IAM organization.

Required Qualifications

• Significant experience in Identity and Access Management, enterprise directory services, or authentication engineering.
• 12+ years of experience in information security or related technology experience required; experience in the securities or financial services industry is a plus.
• Strong knowledge with 3 or more years of direct experience with Microsoft Entra ID / Azure AD and its role in enterprise identity architecture.
• Experience supporting identity services for Microsoft 365 and enterprise application ecosystems.
• Understanding of authentication and authorization concepts, including SSO, MFA, conditional access, federation, RBAC, and privileged access.
• Experience working across large, complex enterprise environments with a focus on security, scale, and operational excellence.
• Ability to partner effectively with engineering, cybersecurity, infrastructure, and business stakeholders.
• Strong analytical, problem‑solving, and execution skills.
• Excellent verbal and written communication skills.

Preferred Qualifications

• Experience with identity modernization and transformation initiatives.
• Familiarity with IAM controls, policy alignment, and audit or regulatory expectations.
• Experience with automation, scripting, and platform engineering practices in identity environments.
• Exposure to hybrid identity environments and integration with on‑prem and cloud‑based systems.
• Experience leading or influencing strategic platform initiatives in a large financial services organization.

Why This Role Matters

The Entra ID service is a foundational enterprise capability critical to secure workforce access, Microsoft 365 enablement, and application integration across BNY. This role will help ensure the platform can scale to meet increasing business demand while maintaining strong security, resilience, and control.

Benefits and Rewards

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay‑for‑performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. Base salary offered may vary depending on multiple individualized factors, including market location, job‑related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company‑sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, the employee will be in an “at‑will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.