Senior Infrastructure Security Engineer - Identity and Access Management (IAM)

Prudential Ins Co of America; Newark (NJ); On-site; USD 140,000 - 180,000; Full time

Job summary

Prudential Ins Co of America is seeking a Senior IAM Engineer to design, implement, and support enterprise identity solutions across Microsoft Entra ID and Active Directory. You will partner with product owners and security teams to modernize authentication and lifecycle automation in a hybrid environment.

The role requires hands-on engineering, troubleshooting and clear documentation from requirements through testing and production support. Strong communication and Agile teamwork are essential.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years IAM/identity security engineering experience.
• Hands‑on with Microsoft Entra ID and Active Directory in enterprise environments.
• Experience integrating apps for SSO and automated provisioning (SAML, OIDC, OAuth, SCIM).
• Knowledge of RBAC, access reviews, and least-privilege principles.

Responsibilities

• Design, implement and support enterprise IAM across Microsoft Entra ID, AD and identity governance platforms.
• Onboard and integrate applications using SAML 2.0, OIDC, OAuth 2.0 and SCIM.
• Develop RBAC models and access controls supporting least privilege.
• Support lifecycle processes for joiners, movers and leavers, including provisioning and deprovisioning.
• Automate identity and compliance activities with PowerShell and platform APIs.

Skills

IAM experience

Identity security

SSO

Agile/Scrum

Written communication

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

PowerShell

Microsoft Graph

REST APIs

JSON

Job description

Job Classification:

Technology - Engineering & Cloud

Are you interested in building secure, scalable identity capabilities that enable innovation, speed, agility and operational efficiency? The Global Technology team takes pride in a culture where digital transformation, risk management and engineering excellence are built into how we work. When you join our organization, you will help protect the enterprise while growing your technical and leadership capabilities in a highly collaborative environment.

Your Team & Role

As a Senior Identity & Access Management (IAM) Engineer, you will design, implement and support enterprise identity solutions across Microsoft Entra ID, Active Directory and identity governance platforms. You will partner with product owners, application teams, architects, security, risk and operations to modernize authentication, automate identity lifecycle processes and strengthen access governance. The role requires hands‑on engineering, disciplined troubleshooting and clear documentation from requirements and design through testing, cutover and production support.

Here Is What You Can Expect on a Typical Day

• Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory and enterprise identity platforms, with attention to security, availability and operational readiness.
• Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0 and SCIM, including metadata, certificates, redirect URIs, claims, attributes and provisioning rules.
• Design and maintain role-based access control, permission sets, group-based entitlement models and segregation-of-duties controls that support least privilege.
• Support identity lifecycle processes for joiners, movers and leavers, including provisioning, de‑provisioning, approvals, access reviews, expiration and exception handling.
• Develop and enforce Microsoft Entra Conditional Access, MFA, passwordless authentication and Privileged Identity Management controls.
• Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery, identity mapping, domain and UPN considerations, cross‑tenant synchronization, cutover and validation.
• Troubleshoot complex authentication, authorization, token, federation, directory synchronization, Kerberos, SSO and provisioning issues at the L2/L3 engineering level.
• Automate operational and compliance activities through PowerShell, Microsoft Graph and platform APIs, with appropriate testing, logging and change controls.
• Collaborate with application owners, architects, risk, audit and global engineering teams to translate requirements into secure, supportable technical solutions.
• Create and maintain engineering specifications, architecture diagrams, runbooks, support procedures, test evidence and audit‑ready control documentation.
• Participate in Agile delivery, backlog refinement, estimation, testing, release planning and post-implementation support; provide knowledge transfer and mentoring to other engineers.

The Skills & Expertise You Bring

• Bachelor's degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
• 5+ years of IAM, identity security or access-management engineering experience, with 7+ years of overall information technology or cybersecurity experience preferred.
• Hands‑on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
• Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth and SCIM.
• Working knowledge of identity governance concepts, including RBAC, access certifications, segregation of duties, lifecycle management and audit evidence.
• Experience with one or more enterprise IAM platforms such as Silverfort, Bloodhound, Veza, Microsoft Defender.
• Strong knowledge of Conditional Access, MFA, passwordless authentication, PIM/PAM, identity protection and least‑privilege principles.
• Experience troubleshooting identity flows across cloud applications, on‑premises directories, federation services and provisioning connectors.
• PowerShell scripting experience; familiarity with Microsoft Graph, REST APIs, JSON, XML, SQL.
• Ability to evaluate complex technical problems, identify risk, recommend practical remediation and drive issues through resolution.
• Excellent written and verbal communication skills, with the ability to work effectively with technical teams, control partners and business stakeholders.
• Experience working in Agile/Scrum environments and using Jira or comparable planning and delivery tools.

Core Technical Knowledge

Identity platforms

• Microsoft Entra ID, Active Directory, CyberArk, Veza

Authentication & provisioning

• SAML 2.0
• OIDC
• OAuth 2.0
• SCIM
• SSO
• federation
• MFA
• FIDO2
• Windows Hello for Business

Governance & privileged access

• RBAC
• segregation of duties
• access reviews
• lifecycle management
• PIM
• PAM
• least privilege

Directory & hybrid identity

• LDA