Identity and Security Engineer

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment.

Join our Technology Team as an Identity and Security Engineer located in various offices.

We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service.

If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.

This role can be based in various offices, on a hybrid basis. This role reports to the Enterprise Monitoring and Systems Management Supervisor.

Position Summary

The Identity & Security Engineer is responsible for the engineering, architecture, security and monitoring of the firm’s core identity services and hybrid integrations, primarily within Microsoft cloud ecosystems, with a growing presence in AWS and GCP. The engineer designs and implements enterprise identity and access management solutions, leads the design of secure authentication and authorization frameworks, drives automation and engineering best practices, performs root cause analysis on complex identity-based incidents, and ensures secure access to applications and resources at scale.

The Identity & Security Engineer serves as a lead technical resource for complex identity systems and leads engineering efforts related to Active Directory Domain Services, Entra , Single Sign-On, privileged access management, identity protection, lifecycle automation, and enterprise access controls.

This role requires deep technical expertise, strong architectural thinking, and the ability to lead identity modernization efforts across on-premise and cloud environments. This role requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings. This position requires the ability to work flexible hours and participate in on-call rotation.

Key Responsibilities

• Designs, implements, optimizes, and maintains enterprise identity platforms (e.g. Active Directory Domain Services, Entra , SSO, MFA), including architecture, capacity planning, and lifecycle management
• Architects, implements, and improves secure identity frameworks across on-premise and cloud environments, including role-based access control (RBAC), least privilege access models, just-in-time (JIT) access models, conditional access policies, and access life cycles to reduce over-privilege
• Defines and improves identity role design to reduce over-privilege
• Establishes governance for non-human identities (service accounts, automation identities, app registrations) and implements guardrails that prevent unmanaged credentials and high-risk identities
• Builds integrations between identity platforms and business systems and applications
• Collaborates with technology teams, including security, compliance, application, Dev Ops, and infrastructure to implement and ensure secure identity practices across on-premises and cloud environments
• Leads PKI design standards, hardening, modernization efforts and certificate-based authentication risk reduction
• Designs, deploys, and maintains vendor remote access and privileged access management systems
• Engineers detection logic, monitoring, and auditing…