Identity Security Engineer

Millennium; New York (NY); On-site; USD 175,000 - 250,000; Full time

Benefits offered by this job

Base salary

Discretionary bonus

Comprehensive benefits

Job summary

Millennium in New York seeks an experienced Identity Security Engineer to lead security consulting and engineering for identity platforms, including Entra ID, Active Directory, and authentication protocols across on‑premises and cloud environments.

You will shape the identity security roadmap, define security policies, mentor engineers, and partner with Technology, Trading, Legal and Compliance to strengthen access controls and protect critical systems.

Qualifications

• 10+ years in a technical role with 5+ years in information security
• Bachelor’s degree in Computer Science, Engineering, or a related field
• Strong experience with Microsoft security solutions across desktop/server OS, Entra ID, AD, Group Policy, DNS, and collaboration tools

Responsibilities

• Lead security consulting and engineering for Windows, Active Directory, Entra ID, and related identity security solutions
• Define and execute authentication platform strategies across on‑premises and cloud environments
• Serve as a technical authority on SAML, OpenID Connect, OAuth 2.0, Kerberos, including SSO and PKI
• Assess identity risks and communicate remediation plans to senior stakeholders
• Shape the identity security roadmap by evaluating emerging technologies and threats
• Lead identity-related workstreams during security incidents; containment and root-cause analysis
• Partner with Technology, Trading, Legal, Internal Audit and Compliance to enforce identity policies
• Establish production-readiness, documentation, and mentor junior engineers

Skills

Security engineering

Identity security

Entra ID

Active Directory

CI/CD pipelines

Microsoft 365 security

DLP / Azure Information Protection

EDR / SIEM

Regulatory compliance

Education

Bachelor’s degree in Computer Science/Engineering or related field

Tools

Entra ID

Active Directory

Group Policy

PKI

Job description

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.

Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Core to the health and growth of our business, Millennium’s Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium’s information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.

What You'll Do

• Lead security consulting and engineering for Windows, Active Directory, Entra ID, and related identity security solutions, setting technical direction for the design and development of new capabilities
• Define and execute the vision, strategy, architecture, and implementation of authentication platforms across on-premises and cloud environments
• Serve as a technical authority on SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication, including single sign-on, PKI, and associated identity controls
• Assess identity management risks and threats, and communicate remediation plans to senior technical and business stakeholders
• Shape the identity security roadmap by evaluating emerging security and privacy technologies, trends, and threats against key business initiatives
• Lead identity-related workstreams during information security incidents, including containment, root-cause analysis, and post-incident hardening
• Partner with senior stakeholders across Technology, Trading, Legal, Internal Audit, and Compliance to define, govern, and enforce identity and access security policies
• Establish production-readiness, documentation, and operational standards for identity security solutions, while mentoring junior and mid-level security engineers

What You Bring

• 10+ years of experience in a technical role, including 5+ years focused on information security; financial services experience is preferred
• Bachelor’s degree in Computer Science, Engineering, or a related field
• Strong experience engineering Microsoft security solutions across desktop and server operating systems, Entra ID, Active Directory, Group Policy, Desired State Configuration, DNS, and collaboration platforms
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and associated identity security controls
• Experience with Microsoft 365 security controls, including Entra ID, Conditional Access, and Foundry
• Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus

Salary Range

Millennium offers a total compensation package which includes a base salary, discretionary performance bonus, and comprehensive benefits. The estimated base salary range for this position is $175,000 to $250,000, which is specific to New York City and may change in the future. When finalizing an offer, we take into consideration an individual’s experience level and the qualifications they bring to the role to formulate a competitive total compensation package.