Identity Security Engineer – IAM & Cloud Auth Lead

Millennium Management LLC; New York (NY); On-site; USD 175,000 - 250,000; Full time

Job summary

Millennium is seeking an Identity Security Engineer to lead security engineering for Windows, Active Directory, and Entra ID across on‑prem and cloud environments. You will define architecture for authentication platforms and serve as a technical authority on SAML, OAuth, and Kerberos, guiding security policy and incident response.

You will partner with Technology, Trading, Legal, and Compliance to enforce identity access controls and to drive a robust security program, mentoring junior

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field required.
• 10+ years in a technical role with 5+ years in information security; financial services experience preferred.
• Strong experience engineering Microsoft security solutions across desktop and server OS, Entra ID, AD, DNS, and collaboration platforms.
• Experience with IaaS and SaaS through CI/CD pipelines; modern authentication protocols; identity security controls.
• Familiarity with EDR, SIEM, vulnerability management; relevant security certifications a plus.

Responsibilities

• Lead security consulting and engineering for Windows, AD, Entra ID and identity security solutions.
• Define vision, strategy, architecture, and implementation of authentication platforms across on‑prem and cloud.
• Serve as technical authority on SAML, OpenID Connect, OAuth 2.0, Kerberos, and SSO.
• Assess identity risks and communicate remediation plans to stakeholders.
• Shape identity security roadmap by evaluating emerging technologies and threats.
• Lead identity workstreams during security incidents, including containment and post‑incident hardening.
• Partner across Technology, Trading, Legal, Internal Audit, and Compliance to define policies.
• Establish production‑readiness and operational standards, mentoring juniors.

Skills

Windows security

Active Directory

Entra ID

SAML/OAuth/Kerberos

CI/CD pipelines

Microsoft 365 security controls

Data loss prevention

Azure Information Protection

EDR/SIEM

Education

Bachelor's degree in Computer Science or Engineering

Tools

Entra ID

Active Directory

Group Policy

Desired State Configuration

DNS

Microsoft 365 security controls

Azure Information Protection

Job description

Millennium is seeking an Identity Security Engineer to lead security engineering for Windows, Active Directory, and Entra ID across on‑prem and cloud environments. You will define architecture for authentication platforms and serve as a technical authority on SAML, OAuth, and Kerberos, guiding security policy and incident response.

You will partner with Technology, Trading, Legal, and Compliance to enforce identity access controls and to drive a robust security program, mentoring junior