Senior Infrastructure Security Engineer, Identity and Access Management (IAM)

Prudential Financial

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Newark, NJ
Salary
$104,000–$171,600 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $178k
This role $138k
$91k $229k
below market most similar roles pay here above market

This role pays less than 88% of similar roles. Most pay $144,350–$211,650 — the blue band above. At the midpoint, this role pays about $138k versus about $178k for comparable roles.

Based on 240 similar postings.

Employer

About Prudential Financial

Prudential Financial is a global financial services leader and premier active global investment manager.

Prudential Financial currently has 46 open roles on FindRole.

Listed pay typically runs $123,700–$195,000 across 19 roles with salary data.

Most-posted roles

View all roles at Prudential Financial

At a glance

TL;DR · Senior Infrastructure Security Engineer, Identity and Access Management (IAM)

The Senior Infrastructure Security Engineer - Identity and Access Management (IAM) joins the Global Technology team to design, implement, and support enterprise identity solutions. This role involves engineering capabilities across Microsoft Entra ID and Active Directory while modernizing authentication and automating identity lifecycle processes. You will integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0, and SCIM, while maintaining role-based access controls and segregation-of-duties. Key responsibilities include troubleshooting complex federation, Kerberos, and SSO issues at the L2/L3 engineering level. You will utilize PowerShell, Microsoft Graph, and REST APIs to automate compliance activities. The position requires expertise in identity governance, MFA, and PIM/PAM to solve technical problems regarding secure access, directory synchronization, and tenant-to-tenant migrations within a complex hybrid identity environment.

What you'll do

  • Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory, and enterprise identity platforms.
  • Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0, and SCIM protocols.
  • Design and maintain role-based access control, permission sets, and segregation-of-duties controls.
  • Support identity lifecycle processes for joiners, movers, and leavers, including provisioning and access reviews.
  • Develop and enforce Microsoft Entra Conditional Access, MFA, and Privileged Identity Management controls.
  • Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery and cross-tenant synchronization.
  • Troubleshoot complex authentication, authorization, federation, and directory synchronization issues at the L2/L3 level.
  • Automate operational and compliance activities using PowerShell, Microsoft Graph, and platform APIs.

What we're looking for

  • Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
  • 5+ years of IAM, identity security, or access-management engineering experience.
  • 7+ years of overall information technology or cybersecurity experience (preferred).
  • Hands-on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
  • Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth, and SCIM.
  • Working knowledge of identity governance concepts including RBAC, access certifications, segregation of duties, and lifecycle management.
  • Experience with PowerShell scripting and familiarity with Microsoft Graph, REST APIs, JSON, XML, and SQL.
  • Relevant certifications such as Microsoft SC-300, SailPoint, Okta, or CyberArk (preferred).

More like this

Similar roles

Lead Entra Id Engineer

Lam Research

Fremont, CA +2 7 days ago $137,000–$287,000
Microsoft Entra ID SAML OAuth 2.0 OpenID Connect SCIM JWT SSO MFA Conditional Access Zero Trust Azure AWS Ping Identity Okta ForgeRock Saviynt SailPoint CyberArk API Disaster Recovery
10+ yrs exp Hybrid

Senior Identity & Access Management (IAM) Engineer

Allstate

Remote (IL) 62 days ago $98,100–$167,850
Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM
5+ yrs exp Remote

Senior Security Engineer, Infrastructure Services

Apple Inc

San Francisco, CA 41 days ago $184,700–$324,800
TCP/IP Routing Protocols VPN IPSec VXLAN GRE Stateless Firewalls Network Access Control Python Golang Swift Linux Unix OVS Cloud Networking Multi-Cloud
10+ yrs exp