Identity & Access Security Engineer — Entra ID & Zero Trust

simon; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

Simon Property Group seeks a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management across cloud, SaaS, on-premises, and hybrid environments.

You will strengthen authentication, governance, privileged access, and Zero Trust controls while improving reliability and usability of identity services, collaborating with Cyber Security, technology, HR, and business teams.

Qualifications

• Bachelor's degree or equivalent in a related discipline.
• 5+ years in identity and access management or security engineering.
• Hands-on with Entra ID, AD, hybrid identity, MFA, CA, SSO, federation, lifecycle processes.

Responsibilities

• Design, implement, and support Entra ID, AD, and hybrid identity services.
• Engineer MFA, passwordless, SSO, federation, Conditional Access.
• Develop identity patterns for users, admins, service accounts, and partners with Zero Trust.
• Strengthen identity governance: provisioning, transfers, deprovisioning, access reviews, separation of duties.
• Engineer privileged access controls with just-in-time activation and strong authentication.
• Monitor identity platforms for suspicious activity and incidents; work with SOC.
• Integrate identity events with Microsoft Sentinel/Defender and support audits.
• Automate provisioning, reviews, and remediation using PowerShell, Graph, and APIs.
• Maintain identity platforms and document standards; communicate risks to stakeholders.

Skills

Microsoft Entra ID

Active Directory

PowerShell

Microsoft Graph

APIs

Education

Bachelor's degree in Cyber Security / CS / IT / Engineering

Tools

SAML

OAuth 2.0

OpenID Connect

Job description

Simon Property Group seeks a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management across cloud, SaaS, on-premises, and hybrid environments.

You will strengthen authentication, governance, privileged access, and Zero Trust controls while improving reliability and usability of identity services, collaborating with Cyber Security, technology, HR, and business teams.