5+ years of relevant technical experience, with 3+ years in information security; financial services experience preferred
Bachelor's degree in Computer Science, Engineering, or a related field
Proficiency with PingFederate and Entra ID
Experience managing IaaS and SaaS solutions through CI/CD pipelines
Strong understanding of modern authentication protocols and identity security controls
Familiarity with Microsoft 365 security controls
Experience with data loss prevention and Azure Information Protection solutions
Responsibilities
Provide security consulting and engineering for identity security solutions like PingFederate and Entra ID
Design, build, and maintain authentication platforms in on-premises and cloud environments
Engineer and support various authentication methods including SAML, OpenID Connect, and OAuth 2.0
Assess identity management risks and create threat analyses and remediation plans
Evaluate emerging security technologies and recommend solutions for the identity security roadmap
Support identity-related workstreams during information security incidents
Collaborate with various stakeholders to implement identity and access security policies
Transition security solutions from engineering to production and automate workflows
Benefits
Comprehensive health and wellness programs
Flexible work arrangements
Professional development opportunities
Collaborative and inclusive work environment
Access to cutting-edge technology and tools
Full Job Description
Identity Security Engineer
What You'll Do
Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities
Design, build, and maintain authentication platforms across on-premises and cloud environments
Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls
Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders
Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap
Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies
Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code
What You Bring
5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
Bachelor's degree in Computer Science, Engineering, or a related field
Experience with PingFederate and Entra ID
Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
Strong understanding of modern authentication protocols and associated identity security controls
Experience with Microsoft 365 security controls
Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus
