Senior IAM Security Engineer — Entra/AD, Equity + Retirement

VulnU; Newark (NJ); On-site; USD 104,000 - 172,000; Full time

Benefits offered by this job

Retirement match

Equity

Job summary

Prudential Newark seeks a Senior IAM Engineer to design, implement and support enterprise identity solutions across Microsoft Entra ID, Active Directory and governance platforms. You will partner with product teams, security, risk and operations to modernize authentication and automate lifecycle processes.

You will drive least-privilege access, implement passwordless methods, and maintain documentation, runbooks and audit-ready controls.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS, IS, cybersecurity or related field.
• 5+ years IAM/security engineering experience; 7+ years IT/cybersecurity overall preferred.
• Hands-on with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
• Experience integrating apps for SSO and automated provisioning using SAML/OIDC/OAuth/SCIM.
• Knowledge of RBAC, access reviews, lifecycle management and audit evidence.
• Experience with IAM platforms (Silverfort, Bloodhound, Veza, Microsoft Defender).
• Strong knowledge of CA, MFA, passwordless, PIM/PAM, least-privilege concepts.
• Troubleshooting identity flows across cloud/on-prem directories and provisioning connectors.
• PowerShell scripting; familiarity with Graph, REST APIs, JSON, XML, SQL.

Responsibilities

• Engineer and support IAM capabilities across Entra ID and AD with high security and availability.
• Onboard apps using SAML, OIDC, OAuth and SCIM including metadata and provisioning rules.
• Design RBAC and entitlement models; enforce least privilege and access governance.
• Support identity lifecycle processes for joiners/movers/leavers with approvals and reviews.
• Implement Conditional Access, MFA and passwordless authentication controls.
• Plan tenant-to-tenant and hybrid identity changes with validation and cutover.
• Troubleshoot complex authentication/authorization/tokens and provisioning issues.
• Automate OPS and compliance tasks via PowerShell and Graph APIs.
• Create engineering docs, runbooks and audit-ready control evidence.
• Collaborate across teams to translate requirements into secure solutions.

Skills

IAM engineering

Microsoft Entra ID

Active Directory

SSO/SAML/OIDC/OAuth

SCIM provisioning

RBAC & least privilege

PIM/PAM

MFA/passwordless

PowerShell

Microsoft Graph / REST / JSON

Education

Bachelor’s degree in computer science or related

Tools

Jira

Entra Connect

LDAP

Windows Hello for Business

Job description

Prudential Newark seeks a Senior IAM Engineer to design, implement and support enterprise identity solutions across Microsoft Entra ID, Active Directory and governance platforms. You will partner with product teams, security, risk and operations to modernize authentication and automate lifecycle processes.

You will drive least-privilege access, implement passwordless methods, and maintain documentation, runbooks and audit-ready controls.