Identity Security Engineer

Millennium; Miami (FL); Presencial; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Millennium is seeking an experienced security professional in Miami to lead identity and access security initiatives. You will design and operate authentication platforms across on-prem and cloud, implement SSO, PKI, and related controls, and align security measures with business objectives.

Responsibilities include risk assessments, threat analyses, and guiding incident response for identity-related events, while collaborating across Technology, Legal, and Compliance teams.

Qualificações

• 5+ years of relevant technical experience, including 3+ years in information security.
• Bachelor's degree in CS, Engineering, or related field.
• Experience with PingFederate and Entra ID.

Responsabilidades

• Provide security consulting and engineering for authentication solutions.
• Design, build, and maintain authentication platforms across on-premises and cloud.
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos for identity providers.
• Assess identity management risks and produce threat analyses and remediation plans.
• Evaluate emerging security technologies and inform identity security roadmap.
• Support identity-related workstreams during security incidents, including root-cause analysis.
• Collaborate with stakeholders to implement identity and access security policies.
• Transition security solutions from engineering to production with runbooks and automation.

Conhecimentos

Identity security

Security consulting

Authentication design

Threat analysis

Cloud and on-premise auth

Formação académica

Bachelor's degree in Computer Science or Engineering

Ferramentas

PingFederate

Entra ID

Azure Information Protection

Microsoft 365 security controls

EDR

SIEM

Descrição da oferta de emprego

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium's mission is to deliver results for our investors.

Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Core to the health and growth of our business, Millennium's Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium's information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.

What You'll Do

• Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities
• Design, build, and maintain authentication platforms across on-premises and cloud environments
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls
• Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders
• Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap
• Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
• Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies
• Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code

What You Bring

• 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
• Bachelor's degree in Computer Science, Engineering, or a related field
• Experience with PingFederate and Entra ID
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and associated identity security controls
• Experience with Microsoft 365 security controls
• Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus