About the Role:

Grade Level (for internal use):

11

The Role: Lead Identity Security Engineer

The Team:

The selected candidate will join S&P Global's Identity and Access Management (IAM) team, providing solutions architecture, technical leadership in driving our IAM strategy and adoption. This Lead Role will specifically focus on the design, engineering, and implementation of robust security solutions utilizing Microsoft Entra ID PKI. You will be the technical face of our IAM team to engineering and business units, working towards a common framework for identity governance, ensuring secure access and compliance, and supporting strategic goals for cloud identity management.

The Impact:

The candidate will lead the adoption and maturity of our core IAM strategies, with a strong focus on Microsoft Entra ID (Azure AD) and Enterprise PKI. Your responsibilities will include designing, engineering, and leading the implementation of scalable identity and access management solutions utilizing Entra for identity lifecycle management, secure access control, conditional access, and compliance. You will recommend and implement IAM solutions following S&P Global standards, ensuring that identity governance, role-based access control (RBAC), and identity federation are aligned with business use cases. A key responsibility will be managing and expanding our Digi PKI environment across the enterprise for higher security assurance.

What’s in it for you:

As a Lead Engineer within the IAM team, you will set the technical direction and drive IAM strategy through the architecture and design of Entra and PKI solutions for critical business applications. This role is a perfect fit if you are passionate about leading technical initiatives, mastering cloud security technologies, and optimizing enterprise-scale identity management practices. You will ensure that identity and authentication systems—supported by robust Entra and PKI frameworks—are designed to the highest security standards, enhancing business trust and transparency while aligning with our strategic objectives and supporting secure, compliant technology investments.

Position Summary: 

We are seeking a Lead Identity Security Engineer to serve as our senior technical expert for all enterprise identity and access management (IAM) Team. This is a critical, hands-on lead role responsible for guiding the technical direction of our hybrid identity platform, with a focus on Microsoft Entra ID and legacy Active Directory.

• You will lead our complex identity projects, drive the transformation to a cloud-first model, and be responsible for mentoring other engineers. The ideal candidate is a deep technical expert who can ensure our solutions are secure, scalable, and well-designed. 
• While your primary focus is on AD/Entra, experience with PKI and certificate management is a significant advantage.
• 8+ years of experience in Identity & Access Management, with at least 3+ years in a senior or lead engineer role.
• Experience with Modern identity protocols (OAuth 2.0, OIDC, SAML), and advanced troubleshooting.
• Expert-level knowledge of Microsoft Entra ID (formerly Azure AD) and its full suite of security features (Conditional Access, PIM, Identity Protection, Identity Governance).
• Deep technical expertise in designing, supporting, and securing on-premises Active Directory Domain Services (AD DS), including GPO, DNS, and multi-forest/domain environments.
• Proven experience leading large-scale identity migration and transformation projects.
• Strong understanding of hybrid identity concepts and experience managing Entra ID Connect (Azure AD Connect).
• Proficiency in scripting and automation using PowerShell and/or Microsoft Graph API.
• Experience in designing, implementing, or managing an enterprise-scale PKI, including Certificate Authority hierarchies, policies, and certificate lifecycle management.

Location: NJ, NY,

Right to work requirements: This role is limited for candidates with indefinite right to work within the USA.

Compensation/Benefits Information (US Applicants Only):

S&P Global states that the anticipated base salary range for this position is $130,000 – $150,000. Final base salary for this role will be based on the individual’s geographical location as well as experience and qualifications for the role.
In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan.
 

This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here.

What’s In It For You?

Our Purpose:

Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technology–the right combination can unlock possibility and change the world.

Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence®, pinpointing risks and opening possibilities. We Accelerate Progress.

Our People:

We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.

From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. We’re constantly seeking new solutions that have progress in mind. Join us and help create the critical insights that truly make a difference.

Our Values:
 

Integrity, Discovery, Partnership

At S&P Global, we focus on Powering Global Markets. Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.

Benefits:

We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.

Our benefits include: 

• Health & Wellness: Health care coverage designed for the mind and body.

• Flexible Downtime: Generous time off helps keep you energized for your time on.

• Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills.

• Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.

• Family Friendly Perks: It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.

• Beyond the Basics: From retail discounts to referral incentive awards—small perks can make a big difference.

For more information on benefits by country visit: https://spgbenefits.com/benefit-summaries

Global Hiring and Opportunity at S&P Global:

At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.

Recruitment Fraud Alert:

If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to reportfraud@spglobal.com. S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here.

20 - Professional (EEO-2 Job Categories-United States of America), IFTECH202.2 - Middle Professional Tier II (EEO Job Group)