Identity and Access Management Engineer (Windows)

• Identity and Access Management Engineer

• New York, NY (Hybrid, 3 days in office) 

• Highly competitive compensation package

Join an elite technology and research group at the forefront of global finance, where world-class engineering and quantitative research converge to solve some of the most complex problems in any industry. Their teams are composed of passionate problem-solvers who operate in a dynamic, large-scale IT environment. We are seeking a visionary security expert to join them and take ownership of the firm's critical Windows identity and authentication infrastructure, ensuring the highest levels of security and reliability.

The Role

We are seeking an experienced Identity and Access Management (IAM) Engineer to join the Systems Platform Engineering team. This is a crucial role where you will be responsible for building and maintaining the core infrastructure, platforms, and foundational services that power the firm's technology. You will act as a key leader and a trusted liaison between departments to deliver secure and effective identity solutions.

What you’ll be doing:

• Lead the management and evolution of IAM systems, including the design, deployment, and support of authentication and authorization platforms.

• Leverage your expertise in foundational protocols like Kerberos, PKI, and OIDC while working with mainstream identity systems such as Active Directory, ADFS, ADCS, and Entra ID.

• Drive the integration of modern FIDO2-based authentication solutions into our infrastructure.

• Collaborate on projects such as implementing passwordless remote access and designing solutions for cross-platform certificate management.

• Help shape our approach to secure access, providing guidance on best practices and future enhancements.

Who we’re looking for:

• Seven to ten years of relevant experience in identity and access management or related fields.

• Working knowledge of core authentication protocols (Kerberos, PKI, OIDC, FIDO2) and hands-on experience with mainstream identity systems (Active Directory, ADFS, ADCS, and Entra ID).

• Experience with passwordless authentication platforms (Windows Hello, YubiKeys, Passkeys) is highly preferred.

• The ability to guide the integration of IAM capabilities with other services, including prototyping where necessary; advanced coding skills aren’t required.

• Excellent communication and collaboration skills, with the ability to advise on IAM strategy and work closely with teams across the firm.