Identity Security Engineer

Millennium Management LLC; Miami (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

Millennium Management LLC in Miami, FL seeks an Identity Security Engineer to design and implement authentication platforms across on-premises and cloud environments. You will advise on identity controls and contribute to building secure, scalable identity infrastructure.

Responsibilities include managing SAML, OpenID Connect, OAuth 2.0, Kerberos, and PKI, performing threat analyses, and shaping the identity security roadmap with cross‑functional partners.

Qualifications

• 5+ years of relevant technical experience in information security.
• 3+ years focused on information security in financial services or similar.
• Experience with PingFederate and Entra ID.
• Experience managing IaaS and SaaS through CI/CD pipelines.
• Knowledge of modern authentication protocols and identity security controls.
• Experience with Microsoft 365 security controls and data protection (Azure Information Protection).
• Familiarity with EDR, SIEM and regulatory compliance is a plus.

Responsibilities

• Provide security consulting and engineering for identity security solutions across on-prem and cloud.
• Design and maintain authentication platforms across environments.
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication.
• Assess identity management risks and produce threat analyses and remediation plans.
• Evaluate emerging identity security technologies and inform roadmap.
• Support security incidents including containment and post-incident hardening.
• Collaborate with stakeholders to enforce identity and access security policies.
• Transition security solutions to production and automate workflows via scripting.

Skills

Information security

Identity security

Threat modeling / risk assessment

Education

Bachelor’s degree in Computer Science, Engineering, or related field

Tools

PingFederate

Entra ID

CI/CD pipelines

Azure Information Protection

EDR

SIEM

Job description

Identity Security Engineer

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.

Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Core to the health and growth of our business, Millennium’s Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium’s information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.

What You'll Do

• Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities
• Design, build, and maintain authentication platforms across on-premises and cloud environments
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls
• Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders
• Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap
• Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
• Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies
• Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code

What You Bring

• 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
• Bachelor’s degree in Computer Science, Engineering, or a related field
• Experience with PingFederate and Entra ID
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and associated identity security controls
• Experience with Microsoft 365 security controls
• Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus