Identity Security Engineer

5+ years of experience in identity and access management, cybersecurity engineering, security operations, infrastructure security, cloud security, or related technical roles.

Strong understanding of identity security concepts, including authentication, authorization, federation, MFA, access governance, privileged access, least privilege, lifecycle management, and segregation of duties.

Experience supporting or implementing Identity Governance and Administration capabilities, including access requests, approvals, birthright access, access reviews, certification campaigns, provisioning, deprovisioning, entitlement management, and access reconciliation.

Experience configuring, reviewing, or monitoring authentication and access enforcement controls, including password policies, sign-in policies, session controls, MFA, Conditional Access, group-based access, and application access controls.

Familiarity with Privileged Access Management concepts such as credential vaulting, privileged session management, RDP/SSH access, password rotation, service accounts, shared accounts, break-glass access, and just-in-time access.

Working knowledge of identity protocols, APIs, and integration patterns, including SAML, OIDC/OAuth, SCIM, LDAP, Kerberos, REST APIs, API authentication, JSON, webhooks, certificates, secrets, tokens, and integration troubleshooting.

Experience creating or maintaining identity standards, implementation patterns, runbooks, operational procedures, escalation paths, and technical documentation.

Ability to review identity configurations or access control changes performed by other teams, identify security or supportability concerns, and balance risk reduction with user experience and operational needs.

Bachelor’s degree in Computer Science, Engineering, Information Security or related discipline preferred; equivalent experience will be considered.

Industry certifications preferred but not required.

Experience working in highly regulated industries such as financial services or healthcare.

Familiarity with security, identity, and access control frameworks and standards such as NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOC 2, SOX, least privilege, Zero Trust, and privileged access management best practices.

Experience supporting enterprise-scale identity security, IAM, IGA, PAM, Zero Trust, or access governance transformation initiatives.

Passion for continuous learning and staying ahead of evolving identity security risks, modern IAM capabilities, and attacker techniques targeting identity systems.

The base salary range for this position is $135,000 - $155,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit’s incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies.

Bessemer Trust is a family office, overseeing $250 billion in assets for 3,000 individuals and families of substantial wealth. Its more than 1,300 employees are singularly focused on private wealth management — disciplined investment management, sophisticated wealth planning, comprehensive family office services, and highly personalized client service.

Established in 1907 as the family office for Annie and Henry Phipps, Bessemer Trust is in its seventh generation of ownership by the Phipps family. As a self-made entrepreneur, Henry Phipps was a founding partner and chief financial officer of Carnegie Steel.

Bessemer Trust retains its original focus as a privately owned and independent wealth manager deeply committed to its mission of providing peace of mind to its clients. Bessemer’s adherence to putting clients’ interests first, fiduciary mindset, and highly collaborative culture are at the heart of everything the firm does.

For more than 119 years, Bessemer Trust has operated continuously in a single line of business, independently owned by one family.

Headquartered in New York’s Rockefeller Center, Bessemer Trust has 22 offices in total. Woodbridge, NJ, is one of the firm’s largest offices, which hosts a wide range of technology and operations professionals. In addition to its sizable presence in New York and Woodbridge, the firm provides client service through offices in Atlanta, Boston, Chicago, Dallas, Delaware, Denver, Garden City, Grand Cayman, Greenwich, Houston, Los Angeles, Miami, Naples, Nevada, Palm Beach, San Diego, San Francisco, Seattle, Stuart, and Washington, D.C.

To watch a video about Bessemer Trust’s history, click here .

To learn more about Bessemer Trust, click here .

Full-time