Sr. Cloud Engineer

Hybrid: 2-3 days in NYC



RESPONSIBILITIES:

Identity & Authentication:

• 
  

  Owns and evolves the Firm's Microsoft Entra ID and hybrid identity environment, including Conditional Access, Enterprise Applications, and SSO across SAML and OIDC-integrated applications;

  
  


• 
  

  Designs and maintains authentication and access controls, including MFA, passwordless authentication, Windows Hello for Business, certificate-based authentication, and administrative account segmentation;

  
  


• 
  

  Manages privileged access controls, including role-based access, PIM, and related administrative security standards;

  
  


• 
  

  Leads the transition from legacy authentication models to cloud-first identity, including migration of ADFS-integrated applications, adoption of Password Hash Sync where appropriate, and signi...