Identity Security Engineer

Cybersecurity Jobs; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Millennium Management in Miami seeks an Identity Security Engineer to deliver consulting and engineering for identity security across on-premises and cloud environments, focusing on modern authentication, risk analysis, and automation.

Responsibilities include designing and supporting SAML, OpenID Connect, OAuth 2.0, Kerberos, and PKI controls, with collaboration across Technology, Legal, and Compliance teams to enforce access security policies.

Qualifications

• 5+ years' technical experience, 3+ in information security.
• Bachelor’s in CS, Engineering, or related field.
• Experience with PingFederate and Entra ID.
• Experience with IaaS/SaaS via CI/CD pipelines.
• Strong knowledge of modern authentication protocols.
• Experience with Microsoft 365 security controls.
• Experience with data loss prevention and Azure Information Protection.
• Familiarity with EDR, SIEM, vulnerability management; security certifications a plus.

Responsibilities

• Provide security consulting and engineering for identity security solutions and authentication platforms.
• Design, build, and maintain authentication platforms across on-premises and cloud environments.
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication including single sign-on and PKI controls.
• Assess identity management risks and deliver threat analyses and remediation plans for technical and business stakeholders.
• Evaluate emerging security technologies and align to identity security roadmap initiatives.
• Support identity-focused workstreams during incidents with containment and post-incident hardening.
• Coordinate with Technology, Trading, Legal, Internal Audit, and Compliance to enforce identity and access policies.
• Transition solutions from engineering into production and automate identity/workflow processes.

Skills

Identity security

PingFederate

Entra ID

SAML

OpenID Connect

OAuth 2.0

Kerberos

PKI

Single sign-on

CI/CD

IaaS

SaaS

Microsoft 365 security controls

Data loss prevention

Azure Information Protection

EDR

SIEM

Vulnerability management

Education

Bachelor's degree in Computer Science, Engineering, or related field

Job description

Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering for identity security solutions and authentication platforms across on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk analysis, incident support, and moving security capabilities into production through automation.

Responsibilities

• Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, supporting analysis, design, and development of new capabilities
• Design, build, and maintain authentication platforms spanning on-premises and cloud environments
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and associated security controls
• Assess identity management risks and deliver threat analyses and remediation plans for both technical and business stakeholders
• Evaluate emerging security and privacy technologies, trends, and threats aligned to key business initiatives, then recommend approaches that inform the identity security roadmap
• Support identity-focused workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
• Coordinate with Technology, Trading, Legal, Internal Audit, and Compliance teams to implement and enforce identity and access security policies
• Transition solutions from engineering into production, maintain documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code

Requirements

• 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
• Bachelor’s degree in Computer Science, Engineering, or a related field
• Experience with PingFederate and Entra ID
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and identity security controls
• Experience with Microsoft 365 security controls
• Experience implementing data loss prevention and Azure Information Protection, including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus

Location

Miami, FL (onsite)

Technology Focus

• PingFederate, Entra ID
• SAML, OpenID Connect, OAuth 2.0, Kerberos
• PKI, single sign-on
• CI/CD, IaaS, SaaS, infrastructure as code
• Microsoft 365 security controls
• Data loss prevention, Azure Information Protection
• EDR, SIEM, vulnerability management