Security Engineer - IAM

Hudson River Trading (HRT) is looking for a senior-level Security Engineer to join our growing Identity & Access Management (IAM) team. In this role, you’ll have the opportunity to design identity, authentication, and access control solutions that strategically impact HRT’s global cyber security systems.

We are looking for someone with a strong knowledge of secure user authentication patterns for web applications, endpoints and servers, single sign-on (SSO), PAM, and directory services. This role requires proficiency with a programming language (Python preferred), experience managing Linux systems in a multi-user environment, deep familiarity with secure IAM principles and technologies, as well as exceptional organizational, communication, and project management skills, and the ability to troubleshoot complex technical issues.

Responsibilities

• Design and implement SSO and MFA solutions
• Define firm-wide policies, standards, and procedures for IAM
• Support the firm-wide integration of standard IAM solutions into all HRT systems and applications
• Define and automate processes to facilitate regular user access reviews

Qualifications

• Experience designing, implementing, and managing IAM solutions
• Strong understanding of identity federation (SAML, OIDC, OAuth, etc)
• Strong proficiency with one or more programming languages (Python preferred)
• Experience working with configuration management tools like SaltStack, Terraform, etc.
• Experience with one or more of the following: Kerberos, PKI, LDAP, Linux PAM
• Experience with one or more modern identity security/least privilege/PAM tools preferred