> Markdown version of [/jobs/ext/3998150-senior-infrastructure-security-engineer-identity-and-access-management](https://www.wearedevelopers.com/jobs/ext/3998150-senior-infrastructure-security-engineer-identity-and-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Infrastructure Security Engineer - Identity and Access Management - **Company:** Prudential Financial, Inc. - **Location:** Newark, NJ, United States - **Experience:** Expert - **Salary:** $104,000.0 - $171,600.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Microsoft Windows, Active Directory, Application Integration Architecture, JIRA, User Authentication, Microsoft Azure, Microsoft Online Services, Software as a Service, Cloud Computing, Cyber Security, Information Systems, Identity and Access Management, JSON, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Log Analysis, Metadata, OAuth, OpenID, Windows PowerShell, Scrum Methodology, Role-Based Access Control, Release Management, Openid Connect, Azure Active Directory, Runbook, Security Assertion Markup Language (SAML), SAP (Applications), SQL Databases, Systems Integration, Extensible Markup Language (XML), Data Logging, Enterprise Software Applications, Okta, Cyberark, Cloud Monitoring, Core Api, Information Technology, SailPoint, Restful APIs, Splunk, Servicenow - **Published:** October 28, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=6112f4bc5eca5c42 ## About the Role * Bachelor's degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience. * 5+ years of IAM, identity security or access-management engineering experience, with 7+ years of overall information technology or cybersecurity experience preferred. * Hands-on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments. * Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth and SCIM. * Working knowledge of identity governance concepts, including RBAC, access certifications, segregation of duties, lifecycle management and audit evidence. * Experience with one or more enterprise IAM platforms such as Silverfort, Bloodhound, Veza, Microsoft Defender. * Strong knowledge of Conditional Access, MFA, passwordless authentication, PIM/PAM, identity protection and least-privilege principles. * Experience troubleshooting identity flows across cloud applications, on-premises directories, federation services and provisioning connectors. * PowerShell scripting experience; familiarity with Microsoft Graph, REST APIs, JSON, XML, SQL. * Ability to evaluate complex technical problems, identify risk, recommend practical remediation and drive issues through resolution. * Excellent written and verbal communication skills, with the ability to work effectively with technical teams, control partners and business stakeholders. * Experience working in Agile/Scrum environments and using Jira or comparable planning and delivery tools. Core Technical Knowledge Identity platforms Microsoft Entra ID, Active Directory, CyberArk, Veza Authentication & provisioning SAML 2.0, OIDC, OAuth 2.0, SCIM, SSO, federation, MFA, FIDO2, Windows Hello for Business Governance & privileged access RBAC, segregation of duties, access reviews, lifecycle management, PIM, PAM, least privilege Directory & hybrid identity LDAP, Entra Connect, cross-tenant synchronization, guest B2B/B2C, app registrations, enterprise applications Automation & engineering PowerShell, Microsoft Graph, REST APIs, JSON, XML, SQL; engineering specifications, testing and runbooks Cloud & enterprise integrations Microsoft Azure, AWS IAM concepts, ServiceNow, SAP and other SaaS/on-premises applications Delivery & operations Agile/Scrum, Jira, incident/problem/change management, monitoring, audit support and production readiness, * Experience supporting regulated environments and responding to SOX, PCI, internal audit or similar control requirements. * Experience with identity tenant migrations, domain or forest consolidation, cross-tenant synchronization and global cutover coordination. * Experience implementing passwordless authentication and reducing standing privileged access through PIM/PAM. * Familiarity with Azure Monitor, Log Analytics, Splunk or comparable monitoring and security analytics tools. * Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft cybersecurity credentials, SailPoint, Okta or CyberArk certifications. * Experience working across regions and time zones, including occasional support for planned production changes outside core business hours., Success means delivering secure and supportable identity services, reducing manual access processes, improving authentication reliability and producing clear evidence that controls operate as designed. You will be recognized for sound engineering judgment, disciplined execution, strong partnership and the ability to convert complex identity requirements into practical enterprise solutions. ## Description * Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory and enterprise identity platforms, with attention to security, availability and operational readiness. * Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0 and SCIM, including metadata, certificates, redirect URIs, claims, attributes and provisioning rules. * Design and maintain role-based access control, permission sets, group-based entitlement models and segregation-of-duties controls that support least privilege. * Support identity lifecycle processes for joiners, movers and leavers, including provisioning, de-provisioning, approvals, access reviews, expiration and exception handling. * Develop and enforce Microsoft Entra Conditional Access, MFA, passwordless authentication and Privileged Identity Management controls. * Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery, identity mapping, domain and UPN considerations, cross-tenant synchronization, cutover and validation. * Troubleshoot complex authentication, authorization, token, federation, directory synchronization, Kerberos, SSO and provisioning issues at the L2/L3 engineering level. * Automate operational and compliance activities through PowerShell, Microsoft Graph and platform APIs, with appropriate testing, logging and change controls. * Collaborate with application owners, architects, risk, audit and global engineering teams to translate requirements into secure, supportable technical solutions. * Create and maintain engineering specifications, architecture diagrams, runbooks, support procedures, test evidence and audit-ready control documentation. * Participate in Agile delivery, backlog refinement, estimation, testing, release planning and post-implementation support; provide knowledge transfer and mentoring to other engineers.