Identity Security Engineer

About Millennium
Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.

Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team
Core to the health and growth of our business, Millennium’s Information Technology organization supports a flexible, scalable technology environment powered by advanced proprietary systems and the continued development of next-generation analytical and trading capabilities. The Information Security team partners across the firm to protect Millennium’s information and computer systems from internal and external threats, building and operating a robust security program across a complex technical environment.

What You'll Do

• Provide security consulting and engineering for PingFederate, Entra ID, and related identity security solutions, contributing to the analysis, design, and development of new capabilities
• Design, build, and maintain authentication platforms across on-premises and cloud environments
• Engineer and support SAML, OpenID Connect, OAuth 2.0, and Kerberos authentication across identity providers, including single sign-on, PKI, and related security controls
• Assess identity management risks and produce threat analyses and remediation plans for technical and business stakeholders
• Evaluate emerging security and privacy technologies, trends, and threats against key business initiatives, and recommend solutions that inform the identity security roadmap
• Support identity-related workstreams during firmwide information security incidents, including containment, root-cause analysis, and post-incident hardening
• Partner with Technology, Trading, Legal, Internal Audit, and Compliance stakeholders to implement and enforce identity and access security policies
• Transition security solutions from engineering to production, maintain documentation and operational runbooks, and automate identity and access workflows through scripting and infrastructure as code

What You Bring

• 5+ years of relevant technical experience, including 3+ years focused on information security; financial services experience is preferred
• Bachelor’s degree in Computer Science, Engineering, or a related field
• Experience with PingFederate and Entra ID
• Experience managing IaaS and SaaS solutions and services through CI/CD pipelines
• Strong understanding of modern authentication protocols and associated identity security controls
• Experience with Microsoft 365 security controls
• Experience implementing data loss prevention and Azure Information Protection solutions, including data classification, labeling, encryption, and regulatory compliance
• Familiarity with EDR, SIEM, vulnerability management, and relevant security certifications is a plus