Identity Security Engineer

Identity Security EngineerAbout MillenniumMillennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.Meet the TeamCore to the health and growth of our business, Millennium’s Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium’s information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.What You'll DoProvide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilitiesDesign, build, and maintain authentication platforms across on-premises and cloud environmentsEngineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controlsAssess identity management risks and produce threat analyses and remediation plans for technical and business stakeholdersEvaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmapSupport identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardeningPartner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policiesTransition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as codeWhat You Bring5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferredBachelor’s degree in Computer Science, Engineering, or a related fieldExperience with PingFederate and Entra IDExperience managing IaaS and SaaS solutions and services through CI/CD pipelinesStrong understanding of modern authentication protocols and associated identity security controlsExperience with Microsoft 365 security controlsExperience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory complianceFamiliarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plusRecruiter:Melanie MorettiHiring Manager:Luca MihailescuDepartment:Information Technology