Identity Security Engineer

Millennium Management is seeking an Identity Security Engineer to deliver consulting and engineering for identity security solutions and authentication platforms across on-premises and cloud environments. The role emphasizes modern authentication protocols, identity risk analysis, incident support, and moving security capabilities into production through automation.

• Provide security consulting and engineering for Ping Federate
  , Entra , and related identity security solutions, supporting analysis, design, and development of new capabilities
• Design, build, and maintain authentication platforms spanning on-premises and cloud environments
• Engineer and support SAML
  , OpenID Connect
  , OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on
  , PKI
  , and associated security controls
• Assess identity management risks and deliver threat analyses and remediation plans for both technical and business stakeholders
• Evaluate emerging security and privacy technologies, trends, and threats aligned to key business initiatives, then recommend approaches that inform the identity security roadmap
• Support identity-focused work streams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
• Coordinate with Technology, Trading, Legal, Internal Audit, and Compliance teams to implement and enforce identity and access security policies
• Transition solutions from engineering into production, maintain documentation and operational runbooks, and automate identity and access workflows using scripting and infrastructure as code

• 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
• Bachelor’s degree in Computer Science
  , Engineering
  , or a related field
• Experience with Ping Federate and Entra
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and identity security controls
• Experience with Microsoft 365 security controls
• Experience implementing data loss prevention and Azure Information Protection
  , including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR
  , SIEM
  , vulnerability management
  , and relevant security certifications is a plus

Miami, FL (onsite)

• Ping Federate, Entra
• SAML, OpenID Connect, OAuth 2.0, Kerberos
• PKI, single sign-on
• CI/CD, IaaS, SaaS, infrastructure as code
• Microsoft 365 security controls
• Data loss prevention, Azure Information Protection
• EDR, SIEM, vulnerability management