- Design, implement, and maintain authentication systems (LDAP, AD, Kubernetes, Microsoft Entra) using OIDC, OAuth, and SAML protocols.
- Manage privileged access solutions (CyberArk, Keeper) and identity governance platforms (SailPoint, IBM, Oracle).
- Integrate IAM controls into DevSecOps CI/CD pipelines and automate workflows with AI/automation tools.
- Define and enforce IAM policies across AWS, Azure, and GCP cloud environments.
- Document configurations, standards, and procedures in centralized repositories and maintain run‑books.
- Support global incident response, including tabletop exercises and post‑mortem analysis.
- Provide evidentiary support and remediation tracking for audit, compliance, and risk assessments.
- Advise project teams, application owners, and infrastructure services on security controls and best practices.
- Monitor security metrics, generate reports, and act as regional IAM incident response point of contact.
- Utilize service, incident, and change management tools (ServiceNow, Dynamics 365) to track and resolve issues.
- Bachelor’s degree or equivalent experience; 3‑5 years IAM experience in financial services.
- Hands‑on experience with Microsoft Entra, Okta, Ping One, Auth0, and authentication protocols (OAuth, OIDC, SAML).
- Proven work with PAM solutions (CyberArk, Keeper) and remote‑desktop security tools.
- Deployment and administration of IGA platforms such as SailPoint, Saviynt, or Oracle.
- Strong scripting/automation skills (PowerShell, Python) and API integration experience.
- Familiarity with ticketing and PMO tools (ServiceNow, Dynamics 365, Smartsheet, Monday.com).
- Knowledge of cloud IAM across AWS, Azure, GCP and related security services.
- Experience with SIEM/SOAR (Splunk, PAN Cortex) and firewall technologies (Palo Alto, F5) is a plus.
- Excellent communication, documentation, and cross‑team collaboration abilities.
- Proactive, detail‑oriented, able to manage multiple priorities in a fast‑paced environment.
Skills Required
- Bachelor's degree or equivalent experience
- 3-5 years of IAM experience in financial services
- Hands-on experience with Microsoft Entra, Okta, PingOne, Auth0, OAuth, OIDC, and SAML
- Experience with PAM solutions including CyberArk and Keeper
- Experience with remote-desktop security tools
- Deployment and administration experience with IGA platforms such as SailPoint, Saviynt, or Oracle
- Strong PowerShell and Python scripting and automation skills
- API integration experience
- Familiarity with ServiceNow, Dynamics 365, Smartsheet, or Monday.com
- Knowledge of cloud IAM across AWS, Azure, and GCP
- Experience with SIEM/SOAR tools such as Splunk or PAN Cortex
- Experience with firewall technologies such as Palo Alto or F5
- Excellent communication, documentation, and cross-team collaboration abilities
- Ability to manage multiple priorities in a fast-paced environment
What We Do
Cantor Fitzgerald is a leading global financial services firm, serving clients from over 30 offices around the world. Founded in 1945 as a securities brokerage and investment bank, the firm pioneered computer-based bond trading, built one of the broadest distribution networks in the industry and became the market’s premier dealer of government securities. Today, Cantor Fitzgerald is known for its strength across a diverse array of businesses, including equity and fixed income capital markets, investment banking, commercial real estate finance and services, prime brokerage, asset management and wealth management, and e-commerce and online ventures. In all its businesses, the firm is an acknowledged leader in developing advanced technologies to expand market access, and help clients achieve their most important financial and strategic objectives. This commitment to client-centered innovation has led to enduring relationships with many of the world’s most demanding institutional investors and corporations. For more information please visit www.cantor.com.
.png){kind=logo}
