{"id":1360763,"url":"https://alion.io/job/gt-law-identity-and-security-engineer","title":"Identity and Security Engineer","company":{"id":1761387,"name":"Greenberg Traurig","domain":"gtlaw.com","url":"https://alion.io/company/gtlaw","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":63,"ghost_share":0,"stale_share":0.619,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States","Austin, United States","Houston, United States","Dallas, United States","Orlando, United States","Tallahassee, United States","Fort Lauderdale, United States","Phoenix, United States","Charlotte, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":203000,"max_usd":396000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1121},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-05-14T00:00:00Z","employer_posted_date":"2026-05-14","last_verified_at":"2026-10-14T03:01:57Z","board_verified":true,"closed_at":null,"days_open":153,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":152},"description":"Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment.\nJoin our Technology Team as an Identity and Security Engineer located in various offices.\nWe are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.\nThis role can be based in various offices, on a hybrid basis. This role reports to the Enterprise Monitoring and Systems Management Supervisor.\nPosition Summary\nThe Identity & Security Engineer is responsible for the engineering, architecture, security and monitoring of the firm’s core identity services and hybrid integrations, primarily within Microsoft cloud ecosystems, with a growing presence in AWS and GCP. The engineer designs and implements enterprise identity and access management solutions, leads the design of secure authentication and authorization frameworks, drives automation and engineering best practices, performs root cause analysis on complex identity-based incidents, and ensures secure access to applications and resources at scale.\nThe Identity & Security Engineer serves as a lead technical resource for complex identity systems and leads engineering efforts related to Active Directory Domain Services, Entra ID, Single Sign-On, privileged access management, identity protection, lifecycle automation, and enterprise access controls.\nThis role requires deep technical expertise, strong architectural thinking, and the ability to lead identity modernization efforts across on-premise and cloud environments. This role requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings. This position requires the ability to work flexible hours and participate in on-call rotation.\nKey Responsibilities\nDesigns, implements, optimizes, and maintains enterprise identity platforms (e.g. Active Directory Domain Services, Entra ID, SSO, MFA), including architecture, capacity planning, and lifecycle management\nArchitects, implements, and improves secure identity frameworks across on-premise and cloud environments, including role-based access control (RBAC), least privilege access models, just-in-time (JIT) access models, conditional access policies, and access lifecycles to reduce over-privilege\nDefines and improves identity role design to reduce over-privilege\nEstablishes governance for non-human identities (service accounts, automation identities, app registrations) and implements guardrails that prevent unmanaged credentials and high-risk identities\nBuilds integrations between identity platforms and business systems and applications\nCollaborates with technology teams, including security, compliance, application, DevOps, and infrastructure to implement and ensure secure identity practices across on-premises and cloud environments\nLeads PKI design standards, hardening, modernization efforts and certificate-based authentication risk reduction\nDesigns, deploys, and maintains vendor remote access and privileged access management systems \nEngineers detection logic, monitoring, and auditing capabilities to identify and evaluate anomalous user and identity behavior\nLeads detection engineering and incident response for identity and access threats using ITDR, EDR, and SIEM tools, and develops playbooks for containment and remediation\nPartners with Information Security on identity threat detection and response\nProvides Tier 3 escalation support and guidance, and leads root cause analysis for complex identity issues impacting privileged access and authentication across on-prem and cloud environments\nImplements and maintains security configurations to protect against unauthorized access and other security threats against the firm’s on-prem infrastructure and cloud-based platforms\nDevelops, maintains, and reviews automation frameworks, scripts, and infrastructure-as-code to drive process improvement and reduce manual administrative and routine tasks \nPartners with information security and compliance teams to design controls and engineer evidence collection that demonstrate compliance with industry standards\nLeads project delivery and execution of tasks related to areas of identity responsibility, including requirements, design, implementation, testing, rollout, and operational transition\nEvaluates and recommends emerging technologies, trends, and best practices in identity and access management, identity protection and governance\nAuthors design documentation, runbooks, and standards, and enforces identity governance procedures across the team\nQualifications\nSkills & Competencies\nDeep expertise in AD DS, Entra ID, ADCS, and Single Sign-On\nExpert knowledge of identity and access management and role-based access controls\nExpertise designing and engineering federation and multifactor authentication solutions\nExpertise in authentication and authorization protocols and flows (Kerberos, SAML, OAuth 2.0, and OIDC, SAML, LDAP)\nGood working knowledge of public key infrastructure (PKI) and certificate lifecycle management\nStrong understanding of Zero Trust security principles\nIn-depth knowledge of Microsoft Windows operating systems\nGood working knowledge of basic networking concepts, including TCP/IP, DNS, and DHCP\nAdvanced automation and scripting skills (PowerShell, Microsoft Graph API, Python, Terraform, or similar)\nFundamental understanding of AI model infrastructure and AI agent security\nStrong analytical, critical thinking, and problem-solving skills\nAbility to troubleshoot and resolve complex system, application, security, and performance issues\nStrong communication, interpersonal, and cross-functional collaboration skills\nAbility to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiences\nStrong attention to detail and accuracy\nAbility to document and maintain security and monitoring policies, procedures, and configurations\nAbility to multitask efficiently yet prioritize and organize competing work demands\nDemonstrated integrity and commitment to strict ethical standards in all professional dealings\nProven record of reliability and dependability\nCandidate must be a self-starter and independent, yet function as an integral part of a team\nProven ability to work independently and collaboratively in a fast-paced, and security-conscious environment\nCandidate must demonstrate a high degree of initiative and motivation\nAbility to work flexible hours and be on-call\nEducation & Prior Experience\nBachelor’s degree in Computer Science, Information Security, or related field, or equivalent work experience\n8+ years of professional experience designing and engineering medium-to-large enterprise Microsoft Windows AD DS environments, preferably in a law firm or professional services environments\n5+ years of hands-on experience with Microsoft Entra ID in hybrid environments\nExtensive hands-on experience with Active Directory Domain Services design and operations\nStrong hands-on experience with Microsoft Entra Suite architecture\nStrong hands-on experience with federation and SSO integrations\nHands-on experience with identity platforms such as Okta, Ping Identity, or similar\nExperience managing multifactor authentication solutions \nExperience engineering and managing Privileged Access Management platforms\nExperience with AD CS design/hardening or certificate-based authentication modernization\nStrong experience with automation (PowerShell required, API experience strongly preferred)\nExperience with ITDR platforms such as Microsoft Defender for Identity, Entra ID Protection, and Microsoft Defender XDR, or similar\nFamiliarity with AWS and GCP cloud environments are a plus\nRelevant Microsoft certifications: Azure Security Engineer Associate and Identity and Access Administrator Associate, or equivalent are preferred\nRelevant professional cybersecurity certifications, such as CISSP, are a plus\nGT is an EEO employer with an inclusive workplace committed to merit-based consideration and review without regard to an individual’s race, sex, or other protected characteristics and to the principles of non-discrimination on any protected basis.","description_format":"text","description_chars":8841,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","Legal Services"],"lifecycle":[{"event":"open","at":"2026-09-27T23:49:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 16","filings_12m":16,"filings_prev_12m":9,"green_card_filings_12m":0,"median_offered_wage_usd":262500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.375,"p_room":0.28,"age_days":152,"expected_fill_days":49,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/gt-law-identity-and-security-engineer","json_url":"https://alion.io/job/gt-law-identity-and-security-engineer.json","meta":{"generated_at":"2026-10-14T03:20:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5284,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1761387},"rest":"https://alion.io/mcp/rest/get_company?id=1761387"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgt-law-identity-and-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgt-law-identity-and-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgt-law-identity-and-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gt-law-identity-and-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgt-law-identity-and-security-engineer"}]}