Security Engineer - IAM

Hudson River Trading (HRT) is looking for a senior-level Security Engineer to join our growing Identity & Access Management (IAM) team. In this role, you’ll have the opportunity to design identity, authentication, and access control solutions that strategically impact HRT’s global cyber security systems.

We are looking for someone with a strong knowledge of secure user authentication patterns for web applications, endpoints and servers, single sign-on (SSO), PAM, and directory services. This role requires proficiency with a programming language (Python preferred), experience managing Linux systems in a multi-user environment, deep familiarity with secure IAM principles and technologies, as well as exceptional organizational, communication, and project management skills, and the ability to troubleshoot complex technical issues.

Responsibilities

• Design and implement SSO and MFA solutions
• Define firm-wide policies, standards, and procedures for IAM
• Support the firm-wide integration of standard IAM solutions into all HRT systems and applications
• Define and automate processes to facilitate regular user access reviews

Qualifications

• Experience designing, implementing, and managing IAM solutions
• Strong understanding of identity federation (SAML, OIDC, OAuth, etc)
• Strong proficiency with one or more programming languages (Python preferred)
• Experience working with configuration management tools like SaltStack, Terraform, etc.
• Experience with one or more of the following: Kerberos, PKI, LDAP, Linux PAM
• Experience with one or more modern identity security/least privilege/PAM tools preferred
  

Annual base salary range of $150,000 to $250,000. Pay (base and bonus) may vary depending on job-related skills and experience. A sign-on and discretionary performance bonus may be provided as part of the total compensation package, in addition to company-paid medical and/or other benefits.