Identity and Security Engineer
- . Each bullet is a sentence. We'll extract each.
- Qualifications Skills & Competencies: a list of bullet-like sentences. We'll treat as Skills maybe.
- Education & Prior Experience: list of bullet-like sentences. Could be Requirements or Qualifications. Since we have both Qualifications and Skills headings allowed, we could put Education & Prior Experience under Requirements (or Qualifications). The posting lumps "Qualifications Skills & Competencies" then "Education & Prior Experience". We could make two sections: Requirements (maybe Education & Prior Experience) and Skills (Qualifications Skills & Competencies). Or combine.
We must not create sections with filler like "commensurate with experience". Not relevant.
We need to include Benefits? The posting mentions "We offer competitive compensation and an excellent benefits package". That's a statement about benefits but not detailed. It says "competitive compensation and an excellent benefits package". That's substantive enough to include a Benefits section? The rule: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. It does state "competitive compensation and an excellent benefits package". That's somewhat vague but still states benefits exist. Could include Benefits section with that sentence. Pay: "competitive compensation" mentions compensation but not specific pay. Might be considered filler? It says "competitive compensation". That's not a specific number. Might be considered vague but still states compensation. The rule says never create Pay section unless posting actually states them. It does state "competitive compensation". That's a statement about pay. Could include Pay section with that sentence. However, they might consider that too vague. But the rule says "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state them, albeit generically. I'd include them.
Schedule: mentions "This role requires the ability to work flexible hours and participate in on-call rotation." Also "This role can be based in various offices, on a hybrid basis." That's schedule info. So we can include Schedule section with those details.
Thus we will have sections: About the role, Responsibilities, Requirements (Education & Prior Experience), Skills (Qualifications Skills & Competencies), Benefits, Pay, Schedule.
We must not repeat job title as heading. We'll not.
We need to output only HTML fragment, no /. Use
for headings. Use
- for lists. Use
for prose. We need to preserve all substantive information; do not invent or summarize away detail. So we need to keep all details from the posting, but we can format them. We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At end there is EEO statement: "GT is an EEO employer with an inclusive workplace committed to merit-based consideration and review without regard to an individual’s race, sex, or other protected characteristics and to the principles of non-discrimination on any protected basis." That's boilerplate; remove. Also remove duplicated lines? Not seeing duplicates. Now craft sections. About the role: combine intro paragraphs plus maybe position summary? But we have Position Summary separate. Could include both in About the role as prose. Let's extract About the role content: - "Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment. Join our Technology Team as an Identity and Security Engineer located in various offices. We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team. This role can be based in various offices, on a hybrid basis. This role reports to the Enterprise Monitoring and Systems Management Supervisor." - Position Summary paragraph: "The Identity & Security Engineer is responsible for the engineering, architecture, security and monitoring of the firm’s core identity services and hybrid integrations, primarily within Microsoft cloud ecosystems, with a growing presence in AWS and GCP. The engineer designs and implements enterprise identity and access management solutions, leads the design of secure authentication and authorization frameworks, drives automation and engineering best practices, performs root cause analysis on complex identity-based incidents, and ensures secure access to applications and resources at scale. The Identity & Security Engineer serves as a lead technical resource for complex identity systems and leads engineering efforts related to Active Directory Domain Services, Entra ID, Single Sign-On, privileged access management, identity protection, lifecycle automation, and enterprise access controls. This role requires deep technical expertise, strong architectural thinking, and the ability to lead identity modernization efforts across on-premise and cloud environments. This role requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings. This position requires the ability to work flexible hours and participate in on-call rotation." We could combine them. Now Responsibilities: list each bullet from "Key Responsibilities". Let's extract each sentence (they are separated by line breaks). We'll need to ensure we keep all details. Key Responsibilities text: "Designs, implements, optimizes, and maintains enterprise identity platforms (e.g. Active Directory Domain Services, Entra ID, SSO, MFA), including architecture, capacity planning, and lifecycle management Architects, implements, and improves secure identity frameworks across on-premise and cloud environments, including role-based access control (RBAC), least privilege access models, just-in-time (JIT) access models, conditional access policies, and access lifecycles to reduce over-privilege Defines and improves identity role design to reduce over-privilege Establishes governance for non-human identities (service accounts, automation identities, app registrations) and implements guardrails that prevent unmanaged credentials and high-risk identities Builds integrations between identity platforms and business systems and applications Collaborates with technology teams, including security, compliance, application, DevOps, and infrastructure to implement and ensure secure identity practices across on-premises and cloud environments Leads PKI design standards, hardening, modernization efforts and certificate-based authentication risk reduction Designs, deploys, and maintains vendor remote access and privileged access management systems Engineers detection logic, monitoring, and auditing capabilities to identify and evaluate anomalous user and identity behavior Leads detection engineering and incident response for identity and access threats using ITDR, EDR, and SIEM tools, and develops playbooks for containment and remediation Partners with Information Security on identity threat detection and response Provides Tier 3 escalation support and guidance, and leads root cause analysis for complex identity issues impacting privileged access and authentication across on-prem and cloud environments Implements and maintains security configurations to protect against unauthorized access and other security threats against the firm’s on-prem infrastructure and cloud-based platforms Develops, maintains, and reviews automation frameworks, scripts, and infrastructure-as-code to drive process improvement and reduce manual administrative and routine tasks Partners with information security and compliance teams to design controls and engineer evidence collection that demonstrate compliance with industry standards Leads project delivery and execution of tasks related to areas of identity responsibility, including requirements, design, implementation, testing, rollout, and operational transition Evaluates and recommends emerging technologies, trends, and best practices in identity and access management, identity protection and governance Authors design documentation, runbooks, and standards, and enforces identity governance procedures across the team" Note some lines missing punctuation; we will keep as is. Now Skills & Competencies (Qualifications Skills & Competencies): List: "Deep expertise in AD DS, Entra ID, ADCS, and Single Sign-On Expert knowledge of identity and access management and role-based access controls Expertise designing and engineering federation and multifactor authentication solutions Expertise in authentication and authorization protocols and flows (Kerberos, SAML, OAuth 2.0, and OIDC, SAML, LDAP) Good working knowledge of public key infrastructure (PKI) and certificate lifecycle management Strong understanding of Zero Trust security principles In-depth knowledge of Microsoft Windows operating systems Good working knowledge of basic networking concepts, including TCP/IP, DNS, and DHCP Advanced automation and scripting skills (PowerShell, Microsoft Graph API, Python, Terraform, or similar) Fundamental understanding of AI model infrastructure and AI agent security Strong analytical, critical thinking, and problem-solving skills Ability to troubleshoot and resolve complex system, application, security, and performance issues Strong communication, interpersonal, and cross-functional collaboration skills Ability to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiences Strong attention to detail and accuracy Ability to document and maintain security and monitoring policies, procedures, and configurations Ability to multitask efficiently yet prioritize and organize competing work demands Demonstrated integrity and commitment to strict ethical standards in
- for lists. Use