Hybrid: 2-3 days in NYC RESPONSIBILITIES: Identity & Authentication: Owns and evolves the Firm's Microsoft Entra ID and hybrid identity environment, including Conditional Access, Enterprise Applications, and SSO across SAML and OIDC-integrated applications; Designs and maintains authentication and access controls, including MFA, passwordless authentication, Windows Hello for Business, certificate-based authentication, and administrative account segmentation; Manages privileged access controls,