Identity Security Architect: IAM & Privileged Access

Bessemer Trust; Port Reading (NJ); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Hybrid work environment

Competitive base salary and bonus

Job summary

Bessemer Trust is seeking an experienced Identity Security Engineer to design and mature enterprise identity security across the organization. You will own identity governance, provisioning workflows, access control standards, MFA policies, and SaaS identity integration patterns.

The role demands hands-on engineering at both architecture and implementation levels, with a focus on identity governance platforms, provisioning, and risk-based control improvements.

Qualifications

• 5+ years in identity and access management or related roles.
• Experience implementing Identity Governance and Administration capabilities.
• Experience configuring authentication and access enforcement controls.
• Familiarity with privileged access management concepts.

Responsibilities

• Support implementation and maturity of Identity Governance and Administration capabilities.
• Design and validate Conditional Access and MFA policies across providers.
• Support privileged access management capabilities and just-in-time access.
• Collaborate with infrastructure and apps teams to onboard applications into provisioning and SSO.
• Develop and maintain identity integrations using SAML, OIDC/OAuth, SCIM, REST APIs.
• Review access models and entitlements to reduce excessive access.
• Work with ITSM teams to integrate identity processes with workflows.
• Provide escalation support for identity-related operations.
• Interact with Risk, Compliance, Audit to remediate findings and improve controls.
• Stay current on identity security threats and best practices.

Skills

IAM expertise

Identity governance

Privileged access management

Risk assessment

Technical communication

Education

Bachelor's degree in CS/Engineering/Info Security or related

Industry certifications preferred but not required

Tools

Okta

Microsoft Entra ID

ServiceNow

Job description

Bessemer Trust is seeking an experienced Identity Security Engineer to design and mature enterprise identity security across the organization. You will own identity governance, provisioning workflows, access control standards, MFA policies, and SaaS identity integration patterns.

The role demands hands-on engineering at both architecture and implementation levels, with a focus on identity governance platforms, provisioning, and risk-based control improvements.