Principal Identity Engineer

Stack

Responsibilities

• ▹Own the security architecture, standards, authentication methods and roadmap for Microsoft Entra ID, the primary identity provider, partnering with IT on tenant operations
• ▹Design and continuously refine Conditional Access policies for a globally distributed workforce
• ▹Advance the rollout of phishing-resistant, passwordless authentication (passkeys, certificate-based, FIDO2)
• ▹Own federation and single sign-on across the SaaS estate (SAML, OIDC, OAuth 2.0, SCIM provisioning)
• ▹Own the privileged access model using Microsoft Entra PIM: separate admin identities, just-in-time elevation and approval workflows
• ▹Design and maintain break-glass procedures and safeguards for the most sensitive administrative paths
• ▹Reduce standing privilege and make least privilege, just in time the default
• ▹Automate the joiner-mover-leaver lifecycle so access is granted, changed and revoked accurately and promptly
• ▹Build and run access reviews and entitlement governance with the GRC team on audit evidence (ISO 27001, SOC 2, PCI DSS, GLI-19/GLI-33)
• ▹Govern service principals, managed identities and workload/federated credentials across AWS, Azure and GCP
• ▹Partner on secrets governance to shrink the number of long-lived, standing secrets
• ▹Serve as the identity authority for the Zero Trust program (NIST SP 800-207, CISA Zero Trust Maturity Model), including identity-aware access through Cloudflare Access
• ▹Make identity signals (risky sign-ins, privileged elevation, MFA anomalies) first-class inputs to detection and response with Security Operations
• ▹Advise on customer identity (CIAM) and account-security architecture, partnering with Product Security and product engineering
• ▹Be the escalation point for identity-related incidents

Requirements

• ▹10+ years in identity and access management, security engineering or a closely related field, or equivalent practical experience
• ▹Deep, hands-on expertise with a modern enterprise identity platform (Conditional Access, PIM/PAM, authentication methods, identity governance; Microsoft Entra ID is used)
• ▹Strong command of identity protocols and patterns: SAML, OIDC, OAuth 2.0, SCIM and modern MFA
• ▹Experience automating the identity lifecycle and integrating identity across a large SaaS and multi-cloud estate
• ▹Scripting and automation skills (PowerShell, Microsoft Graph API, Python) and comfort with Infrastructure as Code
• ▹A track record of designing least privilege, just-in-time access in a real production environment
• ▹Excellent written and verbal communication: able to explain an access decision to an engineer and a risk to an executive
• ▹Fluency with AI: reaching for AI tools daily, with hands-on experience applying AI to security or engineering work as a must

Nice to have

• ▹Experience in a regulated industry (gaming, financial services, healthcare)
• ▹Exposure to customer/player identity (CIAM) and KYC providers
• ▹Passwordless or phishing-resistant MFA rollouts at scale
• ▹Familiarity with Identity Threat Detection & Response (ITDR)
• ▹Relevant certifications (e.g. Microsoft Identity & Access Administrator, CISSP)

Soft skills

What we offer

• ▹Competitive pay and benefits
• ▹Flexible vacation allowance
• ▹Hybrid / remote working environment
• ▹Startup culture backed by a secure, global brand

About the company

Hard Rock Digital aims to become the best online sportsbook, casino and social gaming company in the world. Its brand is rooted in Hard Rock and the Seminole Tribe of Florida, and its 16-person security organization reports to the VP Security / CISO.