Senior Infrastructure Security Engineer - Identity and Access Management (IAM)

Prudential Financial • Newark, NJ

9d • $104,000 - $171,600

About The Position

The Senior Identity & Access Management (IAM) Engineer designs, implements, and supports enterprise identity solutions across Microsoft Entra ID, Active Directory, and identity governance platforms. The role partners with product owners, application teams, architects, security, risk, and operations to modernize authentication, automate identity lifecycle processes, and strengthen access governance. It requires hands-on engineering, disciplined troubleshooting, and clear documentation from requirements and design through testing, cutover, and production support.

The engineer supports secure, available, operationally ready identity capabilities; integrates applications for single sign-on and automated provisioning; maintains role-based access and least-privilege controls; and helps manage joiner, mover, and leaver processes. The role also develops authentication and privileged-access controls, plans hybrid and tenant migration changes, resolves complex identity issues, automates operational and compliance work, and prepares engineering and audit documentation.

The position participates in Agile delivery and production support, collaborating with technical and business partners and providing knowledge transfer and mentoring. Success involves delivering supportable identity services, reducing manual access processes, improving authentication reliability, and producing evidence that controls operate as designed.

The stated salary range is $104,000 to $171,600, with pricing varying based on factors including geographic location, experience, and skills. The role includes yearly bonus potential and a range of benefits described in the posting.

Requirements

• Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
• At least 5 years of IAM, identity security, or access-management engineering experience.
• Hands-on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
• Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth, and SCIM.
• Working knowledge of identity governance concepts, including RBAC, access certifications, segregation of duties, lifecycle management, and audit evidence.
• Experience with one or more enterprise IAM platforms such as Silverfort, Bloodhound, Veza, or Microsoft Defender.
• Strong knowledge of Conditional Access, MFA, passwordless authentication, PIM/PAM, identity protection, and least-privilege principles.
• Experience troubleshooting identity flows across cloud applications, on-premises directories, federation services, and provisioning connectors.
• PowerShell scripting experience; familiarity with Microsoft Graph, REST APIs, JSON, XML, and SQL.
• Ability to evaluate complex technical problems, identify risk, recommend practical remediation, and drive issues through resolution.
• Excellent written and verbal communication skills and ability to work effectively with technical teams, control partners, and business stakeholders.
• Experience working in Agile/Scrum environments and using Jira or comparable planning and delivery tools.

Nice To Haves

• At least 7 years of overall information technology or cybersecurity experience is preferred.
• Experience supporting regulated environments and responding to SOX, PCI, internal audit, or similar control requirements.
• Experience with identity tenant migrations, domain or forest consolidation, cross-tenant synchronization, and global cutover coordination.
• Experience implementing passwordless authentication and reducing standing privileged access through PIM/PAM.
• Familiarity with Azure Monitor, Log Analytics, Splunk, or comparable monitoring and security analytics tools.
• Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft cybersecurity credentials, SailPoint, Okta, or CyberArk certifications.
• Experience working across regions and time zones, including occasional support for planned production changes outside core business hours.

Responsibilities

• Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory, and enterprise identity platforms, considering security, availability, and operational readiness.
• Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0, and SCIM, including configuration of metadata, certificates, redirect URIs, claims, attributes, and provisioning rules.
• Design and maintain role-based access control, permission sets, group-based entitlement models, and segregation-of-duties controls that support least privilege.
• Support joiner, mover, and leaver identity lifecycle processes, including provisioning, de-provisioning, approvals, access reviews, expiration, and exception handling.
• Develop and enforce Microsoft Entra Conditional Access, MFA, passwordless authentication, and Privileged Identity Management controls.
• Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery, identity mapping, domain and UPN considerations, cross-tenant synchronization, cutover, and validation.
• Troubleshoot complex authentication, authorization, token, federation, directory synchronization, Kerberos, SSO, and provisioning issues at the L2/L3 engineering level.
• Automate operational and compliance activities through PowerShell, Microsoft Graph, and platform APIs, with appropriate testing, logging, and change controls.
• Collaborate with application owners, architects, risk, audit, and global engineering teams to translate requirements into secure, supportable technical solutions.
• Create and maintain engineering specifications, architecture diagrams, runbooks, support procedures, test evidence, and audit-ready control documentation.
• Participate in Agile delivery, backlog refinement, estimation, testing, release planning, and post-implementation support.
• Provide knowledge transfer and mentoring to other engineers.

Benefits

• Market-competitive base salaries with yearly bonus potential at every level.
• Medical insurance.
• Dental insurance.
• Vision insurance.
• Life insurance.
• Disability insurance.
• Paid Time Off (PTO) and leaves of absence, such as parental and military leave.
• 401(k) plan with company match up to 4%.
• Company-funded pension plan.
• Wellness Programs, including up to $1,600 per year for reimbursement of items purchased to support personal wellbeing needs.
• Work/Life Resources for parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
• Education Benefit to help finance approved traditional college enrollment and accredited certificate programs.
• Employee Stock Purchase Plan, allowing shares to be purchased at 85% of the lower of two prices at the beginning or end of the purchase period.
• Eligibility to participate in a discretionary annual incentive program, subject to program rules and applicable factors.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior