Apply on Employer Site

S&P Global · 2 months ago

Lead Identity Security Engineer

United States

Full-time

Remote

Senior Level, Lead/Staff

$130K/yr - $150K/yr

8+ years exp

S&P Global is a leading organization focused on providing essential intelligence, and they are seeking a Lead Identity Security Engineer to guide their Identity and Access Management (IAM) team. The role involves designing and implementing security solutions, leading technical initiatives, and ensuring compliance and secure access across the enterprise's identity management systems.

AnalyticsBusiness IntelligenceCreditEnterprise SoftwareFinanceFinancial ServicesInformation ServicesMarket Research

Culture & Values

No H1B

Responsibilities

Lead the adoption and maturity of core IAM strategies

Design, engineer, and lead the implementation of scalable identity and access management solutions utilizing Entra for identity lifecycle management, secure access control, conditional access, and compliance

Recommend and implement IAM solutions following S&P Global standards, ensuring that identity governance, role-based access control (RBAC), and identity federation are aligned with business use cases

Manage and expand the Digi PKI environment across the enterprise for higher security assurance

Set the technical direction and drive IAM strategy through the architecture and design of Entra and PKI solutions for critical business applications

Lead complex identity projects and drive the transformation to a cloud-first model

Mentor other engineers in the team

Qualification

Microsoft Entra IDEnterprise PKIIdentity & Access ManagementModern identity protocolsActive DirectoryPowerShellCertificate managementTroubleshootingTechnical leadershipMentoring

Required

8+ years of experience in Identity & Access Management, with at least 3+ years in a senior or lead engineer role

Experience with Modern identity protocols (OAuth 2.0, OIDC, SAML), and advanced troubleshooting

Expert-level knowledge of Microsoft Entra ID (formerly Azure AD) and its full suite of security features (Conditional Access, PIM, Identity Protection, Identity Governance)

Deep technical expertise in designing, supporting, and securing on-premises Active Directory Domain Services (AD DS), including GPO, DNS, and multi-forest/domain environments

Proven experience leading large-scale identity migration and transformation projects

Strong understanding of hybrid identity concepts and experience managing Entra ID Connect (Azure AD Connect)

Proficiency in scripting and automation using PowerShell and/or Microsoft Graph API

Experience in designing, implementing, or managing an enterprise-scale PKI, including Certificate Authority hierarchies, policies, and certificate lifecycle management

Preferred

Experience with PKI and certificate management is a significant advantage

Benefits

Health & Wellness: Health care coverage designed for the mind and body.

Flexible Downtime: Generous time off helps keep you energized for your time on.

Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.