About the Role:

Grade Level (for internal use):

The Role: Lead Identity Security Engineer

The Team:

The selected candidate will join S&P Global's Identity and Access Management (IAM) team, providing solutions architecture, technical leadership in driving our IAM strategy and adoption. This Lead Role will specifically focus on the design, engineering, and implementation of robust security solutions utilizing Microsoft Entra ID PKI. You will be the technical face of our IAM team to engineering and business units, working towards a common framework for identity governance, ensuring secure access and compliance, and supporting strategic goals for cloud identity management.

The Impact:

The candidate will lead the adoption and maturity of our core IAM strategies, with a strong focus on Microsoft Entra ID (Azure AD) and Enterprise PKI. Your responsibilities will include designing, engineering, and leading the implementation of scalable identity and access management solutions utilizing Entra for identity lifecycle management, secure access control, conditional access, and compliance. You will recommend and implement IAM solutions following S&P Global standards, ensuring that identity governance, role-based access control (RBAC), and identity federation are aligned with business use cases. A key responsibility will be managing and expanding our Digi PKI environment across the enterprise for higher security assurance.

What’s in it for you:

As a Lead Engineer within the IAM team, you will set the technical direction and drive IAM strategy through the architecture and design of Entra and PKI solutions for critical business applications. This role is a perfect fit if you are passionate about leading technical initiatives, mastering cloud security technologies, and optimizing enterprise-scale identity management practices. You will ensure that identity and authentication systems—supported by robust Entra and PKI frameworks—are designed to the highest security standards, enhancing business trust and transparency while aligning with our strategic objectives and supporting secure, compliant technology investments.

Position Summary: 

We are seeking a Lead Identity Security Engineer to serve as our senior technical expert for all enterprise identity and access management (IAM) Team. This is a critical, hands-on lead role responsible for guiding the technical direction of our hybrid identity platform, with a focus on Microsoft Entra ID and legacy Active Directory.

• You will lead our complex identity projects, drive the transformation to a cloud-first model, and be responsible for mentoring other engineers. The ideal candidate is a deep technical expert who can ensure our solutions are secure, scalable, and well-designed. 
• While your primary focus is on AD/Entra, experience with PKI and certificate management is a significant advantage.
• 8+ years of experience in Identity & Access Management, with at least 3+ years in a senior or lead engineer role.
• Experience with Modern identity protocols (OAuth 2.0, OIDC, SAML), and advanced troubleshooting.
• Expert-level knowledge of Microsoft Entra ID (formerly Azure AD) and its full suite of security features (Conditional Access, PIM, Identity Protection, Identity Governance).
• Deep technical expertise in designing, supporting, and securing on-premises Active Directory Domain Services (AD DS), including GPO, DNS, and multi-forest/domain environments.
• Proven experience leading large-scale identity migration and transformation projects.
• Strong understanding of hybrid identity concepts and experience managing Entra ID Connect (Azure AD Connect).
• Proficiency in scripting and automation using PowerShell and/or Microsoft Graph API.
• Experience in designing, implementing, or managing an enterprise-scale PKI, including Certificate Authority hierarchies, policies, and certificate lifecycle management.

Location: NJ, NY,

Right to work requirements: This role is limited for candidates with indefinite right to work within the USA.

Compensation/Benefits Information (US Applicants Only):

S&P Global states that the anticipated base salary range for this position is $130,000 – $150,000. Final base salary for this role will be based on the individual’s geographical location as well as experience and q