Job Description

• Senior Systems Engineer - Identity & Authentication

• New York, NY (Hybrid, 3 days in office)

• Highly competitive compensation package

Join an elite technology group at the forefront of global finance. We are seeking a Systems Engineer who operates at the intersection of deep infrastructure and software architecture. This is not an operational administration role; it is an architectural position responsible for the plumbing of the firm’s identity stack. You will bridge the gap between a mature Active Directory environment and a modern, cross-platform (Linux/Cloud), zero-trust ecosystem.

The Role

While you’ll serve as the firm’s authority on the Microsoft Identity stack (AD/ADFS/ADCS), your mandate is interoperability. You will design authentication flows that allow seamless, secure movement between Windows, Linux, and Cloud environments. We need a builder who can look at legacy Kerberos implementations and architect their evolution into modern OIDC/OAuth standards without breaking the business.

What you’ll be doing

• Own the design and evolution of critical identity platforms (Active Directory, ADCS, ADFS), moving beyond maintenance to engineer resilience and scale.

• Bridge the OS divide and engineer the glue between Windows and Linux. You will solve complex challenges like cross-platform certificate enrollment (PKI for Linux/Unix) and heterogeneous authentication flows.

• Lead the technical migration from legacy auth to modern standards, implementing FIDO2/WebAuthn and transitioning apps from Kerberos to OIDC.

• Escape the GUI. Use PowerShell, C#, or Python to build custom tooling, automate lifecycle management, and treat infrastructure as code.

• Design robust mechanisms for managing the lifecycle of digital identities, secrets, and machine keys in a high-security environment.

You will bring:

Engineering over Administration: 10-15+ years of experience. You are an engineer who builds systems, not an admin who manages tickets.

Protocol Fluency: You have forensic knowledge of how authentication works (Kerberos logic, LDAP binds, OIDC flows), not just how to configure the tool that uses it.

The "Hybrid" Skill Set: Deep expertise in Active Directory and PKI is required, but you must be comfortable working alongside Linux Engineering teams to integrate non-Windows services.

Developer Mindset: Strong scripting/coding ability (PowerShell, C#, or Python) is essential for building automation and integration tools.

Complexity: Experience in large-scale, heterogeneous enterprise environments where "out of the box" Microsoft solutions often need custom engineering to work.