Identity Security Architect & IAM Engineer

bessemer; Port Reading (NJ); On-site; USD 135,000 - 155,000; Full time

Job summary

Bessemer Trust is seeking an experienced Identity Security Engineer to design, implement, and mature enterprise identity security capabilities across the organization. You will be the technical owner for identity governance, provisioning, access controls, authentication policies, and SaaS identity integration, engaging with risk, compliance, and audit stakeholders.

The role requires hands-on architecture and implementation skills, with visibility into identity standards (SAML, OIDC/OAuth, SCIM)

Qualifications

• 5+ years in identity and access management or related security roles.
• Experience configuring authentication and access controls including MFA and Conditional Access.
• Experience with Identity Governance and Administration provisioning and deprovisioning.

Responsibilities

• Support Identity Governance and Administration capabilities across provisioning and life-cycle automation.
• Design and validate Conditional Access, MFA, and password policies across identity platforms.
• Onboard applications into provisioning, SSO, and privileged access processes with approved patterns.
• Collaborate with Infrastructure and Application teams to support identity integrations (SAML, OIDC, SCIM).
• Work with Risk, Compliance, and Audit to remediate findings and improve controls.

Skills

Analytics

Troubleshooting

Communication

Project management

Stakeholder management

Strategic thinking

Ownership

Education

Bachelor’s degree in Computer Science/Engineering/Information Security

Tools

Okta

Microsoft Entra ID

SAML

OIDC/OAuth

SCIM

REST APIs

ServiceNow

Job description

Bessemer Trust is seeking an experienced Identity Security Engineer to design, implement, and mature enterprise identity security capabilities across the organization. You will be the technical owner for identity governance, provisioning, access controls, authentication policies, and SaaS identity integration, engaging with risk, compliance, and audit stakeholders.

The role requires hands-on architecture and implementation skills, with visibility into identity standards (SAML, OIDC/OAuth, SCIM)