Lead Security Engineer

Gartner•Stamford, CT

2d•$116,000 - $170,000•Hybrid

About The Position

Gartner is seeking an experienced Lead Engineer in Identity & Access Management (IAM) to lead the design, implementation, support, and modernization of enterprise identity solutions across Okta, Microsoft Entra ID, and other platforms. The role architects secure authentication and authorization frameworks and implements SSO, MFA, access governance, and automation capabilities in line with industry best practices. The position provides technical leadership for IAM projects from requirements gathering and solution design through implementation and operational transition. It partners with security, infrastructure, application, and cloud teams; resolves complex identity issues; supports audit and compliance activities; documents architecture and operating standards; and mentors engineers. The role also evaluates emerging identity technologies and recommends improvements to security, scalability, and operational efficiency. The position is offered in Gartner’s hybrid work environment, combining virtual work with collaboration in its offices. Gartner describes its culture as action-oriented, intellectually curious, and collaborative.

Requirements

8+ years of IAM experience in enterprise environments.
Strong understanding of IAM concepts, standards, and best practices, including authentication, authorization, lifecycle management, and access governance.
Hands-on experience with SSO libraries and providing technical guidance to developers on secure integrations using SAML, OAuth 2.0, OIDC, and SCIM.
Hands-on experience configuring, deploying, and managing policies for MFA solutions.
Extensive Okta experience, including authentication and authorization policy design, SSO integrations, Lifecycle Management, identity governance, and access controls.
Strong Microsoft Entra ID (Azure AD) knowledge, including tenant configuration and administration, Conditional Access, MFA and authentication methods, RBAC, PIM, and identity security controls.
Experience building IAM automation solutions using source control and CI/CD tools such as Bitbucket, Jenkins, and CloudBees.
Strong Python and PowerShell scripting and automation skills for identity management, operational efficiency, and workflow automation.
Experience designing, developing, and deploying automation solutions across Microsoft Entra ID and AWS environments.
Experience with SIEM platforms, including dashboard design and visualization of security KPIs, metrics, and threat trends.
Ability to lead projects independently, manage stakeholder expectations, and mentor junior engineers and team members.

Nice To Haves

Experience with Identity Governance and Administration (IGA) platforms.
Understanding of Zero Trust architecture and modern identity security frameworks.
Experience designing and supporting high-availability and disaster recovery architectures for identity platforms.
Experience working in Agile/Scrum environments and leading cross-functional initiatives.
Understanding or experience in AI identity security.
Experience managing Active Directory/LDAP.
Experience with Infrastructure as Code tools such as Terraform for secure and automated infrastructure deployment and management.

Responsibilities

Lead the design, implementation, and support of enterprise IAM solutions across Okta, Microsoft Entra ID, and other IAM platforms and services.
Design and implement SSO, MFA, Conditional Access, and authentication policies.
Architect and deploy identity integrations using SAML, OAuth 2.0, OIDC, SCIM, LDAP, and REST APIs.
Manage and enhance Okta Lifecycle Management and Entra ID identity lifecycle processes, including provisioning, deprovisioning, and access governance.
Develop and maintain IAM automation solutions using Python, PowerShell, and cloud-native capabilities.
Design and implement RBAC, PIM, and least-privilege access controls across enterprise environments.
Partner with security, infrastructure, application, and cloud teams to onboard applications and integrate them with enterprise identity platforms.
Provide technical leadership for IAM projects, including requirements gathering, solution design, implementation, and operational transition.
Drive IAM platform modernization and adoption of industry best practices and security standards.
Troubleshoot and resolve complex authentication, federation, provisioning, and access-related issues.
Create and maintain architecture documentation, operational procedures, and technical standards.
Mentor engineers and provide technical guidance to support team growth and capability development.
Support audit, compliance, and risk management activities by ensuring identity controls are implemented and operating effectively.
Evaluate emerging identity technologies and recommend improvements to enhance security, scalability, and operational efficiency.

Benefits

Competitive compensation and an annual bonus plan based on company and individual performance, or a role-based sales incentive plan, as applicable.
Limitless growth and learning opportunities.
20+ PTO days plus holidays and floating holidays in the first year.
Medical, dental, and vision insurance.
401(k) with corporate match and immediate vesting; the posting also describes a match of up to $7,200 per year.
Health-and-wellness-related allowance programs.
Parental leave.
Tuition reimbursement.
Employee Stock Purchase Plan, with the opportunity to purchase company stock at a discount.
Employee Assistance Program.
Gartner Gives Charity Match.
Hybrid work flexibility.