Identity Security Engineer

Millennium Management LLC; New York (NY); On-site; USD 175,000 - 250,000; Full time

Job summary

Millennium is seeking an Identity Security Engineer to lead security engineering for Windows, Active Directory, and Entra ID across on‑prem and cloud environments. You will define architecture for authentication platforms and serve as a technical authority on SAML, OAuth, and Kerberos, guiding security policy and incident response.

You will partner with Technology, Trading, Legal, and Compliance to enforce identity access controls and to drive a robust security program, mentoring junior

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field required.
• 10+ years in a technical role with 5+ years in information security; financial services experience preferred.
• Strong experience engineering Microsoft security solutions across desktop and server OS, Entra ID, AD, DNS, and collaboration platforms.
• Experience with IaaS and SaaS through CI/CD pipelines; modern authentication protocols; identity security controls.
• Familiarity with EDR, SIEM, vulnerability management; relevant security certifications a plus.

Responsibilities

• Lead security consulting and engineering for Windows, AD, Entra ID and identity security solutions.
• Define vision, strategy, architecture, and implementation of authentication platforms across on‑prem and cloud.
• Serve as technical authority on SAML, OpenID Connect, OAuth 2.0, Kerberos, and SSO.
• Assess identity risks and communicate remediation plans to stakeholders.
• Shape identity security roadmap by evaluating emerging technologies and threats.
• Lead identity workstreams during security incidents, including containment and post‑incident hardening.
• Partner across Technology, Trading, Legal, Internal Audit, and Compliance to define policies.
• Establish production‑readiness and operational standards, mentoring juniors.

Skills

Windows security

Active Directory

Entra ID

SAML/OAuth/Kerberos

CI/CD pipelines

Microsoft 365 security controls

Data loss prevention

Azure Information Protection

EDR/SIEM

Education

Bachelor's degree in Computer Science or Engineering

Tools

Entra ID

Active Directory

Group Policy

Desired State Configuration

DNS

Microsoft 365 security controls

Azure Information Protection

Job description

Identity Security EngineerAbout MillenniumMillennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.Meet the TeamCore to the health and growth of our business, Millennium’s Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium’s information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.What You'll DoLead security consulting and engineering for Windows, Active Directory, Entra ID, and related identity security solutions, setting technical direction for the design and development of new capabilitiesDefine and execute the vision, strategy, architecture, and implementation of authentication platforms across on-premises and cloud environmentsServe as a technical authority on SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication, including single sign-on, PKI, and associated identity controlsAssess identity management risks and threats, and communicate remediation plans to senior technical and business stakeholdersShape the identity security roadmap by evaluating emerging security and privacy technologies, trends, and threats against key business initiativesLead identity-related workstreams during information security incidents, including containment, root-cause analysis, and post-incident hardeningPartner with senior stakeholders across Technology, Trading, Legal, Internal Audit, and Compliance to define, govern, and enforce identity and access security policiesEstablish production-readiness, documentation, and operational standards for identity security solutions, while mentoring junior and mid-level security engineersWhat You Bring10+ years of experience in a technical role, including 5+ years focused on information security; financial services experience is preferredBachelor’s degree in Computer Science, Engineering, or a related fieldStrong experience engineering Microsoft security solutions across desktop and server operating systems, Entra ID, Active Directory, Group Policy, Desired State Configuration, DNS, and collaboration platformsExperience managing IaaS and SaaS solutions and services through CI/CD pipelinesStrong understanding of modern authentication protocols and associated identity security controlsExperience with Microsoft 365 security controls, including Entra ID, Conditional Access, and FoundryExperience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory complianceFamiliarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plusSalary RangeMillennium offers a total compensation package which includes a base salary, discretionary performance bonus, and comprehensive benefits. The estimated base salary range for this position is $175,000 to $250,000, which is specific to New York City and may change in the future. When finalizing an offer, we take into consideration an individual’s experience level and the qualifications they bring to the role to formulate a competitive total compensation package.