Cyber Security Identity Engineer

Job Location:

Simon Property Group is seeking a Cyber Security Identity Engineer to design, secure, and support enterprise identity and access management services across cloud, SaaS, on-premises, and hybrid environments. Working across Cyber Security, technology, Human Resources, and business teams, this role strengthens authentication, identity governance, privileged access, and Zero Trust controls while improving the reliability and usability of identity services.

Primary Responsibilities

·    Design, implement, and support Microsoft Entra ID, Active Directory, hybrid identity, directory synchronization, and related enterprise identity services.

·    Engineer authentication and access controls, including multi-factor and passwordless authentication, Single Sign-On, federation, Conditional Access, and secure application integrations.

·    Develop secure identity patterns for users, administrators, service accounts, application identities, and external partners while advancing Zero Trust and reducing legacy authentication.

·    Strengthen identity lifecycle and governance processes, including provisioning, transfers, deprovisioning, role-based access, entitlement management, access reviews, and separation-of-duties controls.

·    Engineer privileged access controls using just-in-time activation, approval workflows, time-bound access, strong authentication, and standards for administrative, emergency, and service accounts.

·    Monitor identity platforms for suspicious activity, risky access, privilege misuse, and configuration weaknesses; partner with Security Operations to investigate and remediate identity-related incidents.

·    Integrate identity events and risk signals with Microsoft Sentinel, Microsoft Defender, and related monitoring platforms, and support audits, assessments, compliance, and risk remediation.

·    Automate provisioning, reviews, reporting, and remediation using PowerShell, Microsoft Graph, APIs, and related technologies.

·    Maintain reliable identity platforms, troubleshoot complex access issues, document standards and procedures, evaluate emerging practices, and communicate risks and recommendations to stakeholders.

Required Qualifications

·    Bachelor’s degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent education and experience.

·    5+ years of progressive experience in identity and access management, security engineering, infrastructure security, systems integration, or a related technical discipline.

·    Hands-on experience with Microsoft Entra ID, Active Directory, identity synchronization, hybrid identity, multi-factor authentication, Conditional Access, Single Sign-On, federation, role-based access, and identity lifecycle processes.

·    Working knowledge of SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate-based authentication, Zero Trust, privileged access, and access governance.

·    Experience with PowerShell, Microsoft Graph, APIs, or comparable scripting and automation technologies.

·    Strong analytical, troubleshooting, documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

·    Advanced experience with Microsoft Entra ID Protection and Governance, Conditional Access, Privileged Identity Management, entitlement management, or passwordless authentication.

·    Experience with privileged access or identity governance platforms such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, or comparable technologies.

·    Experience securing Microsoft 365, Azure, SaaS and enterprise applications, integrating HR systems with identity processes, and supporting security monitoring, audits, or regulatory requirements.

·    Relevant Microsoft, identity, or security certification, such as Identity and Access Administrator Associate, Cybersecurity Architect Expert, CISSP, or Security+.