Senior Engineer – Identity & Access Management

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Implement and support authentication and authorization protocols

• Provide infrastructure support aligned with cybersecurity and digital risk principles

• Manage and support on-premise and cloud-based workforce IAM platforms throughout the software development lifecycle

• Design, configure, and troubleshoot IAM solutions

• Conduct root cause analysis and implement preventive solutions

• Develop, test, document, and manage IAM automation processes and integrations

• Architect and implement automation accelerators and enablers

• Identify opportunities for process optimization to enhance service delivery and scalability

• Ensure that technical solutions comply with regulatory, compliance, and internal requirements

• Maintain IAM documentation, policies, standards, and procedures

• Document best practices for authentication and authorization in collaboration with architects and security teams

• Create or support data visualizations for trend analysis

• Align IAM security with the Cyber Defense and Risk strategy

• Collaborate with IAM, development, cyber defense, architecture, analyst, and service-consumer teams

• Enforce consistent authentication and authorization mechanisms across platforms

• Provide guidance on implementing and utilizing IAM capabilities in enterprise systems

⛳️ Requirements

• Bachelor's degree required; a degree in a STEM field is preferred

• 3+ years of relevant experience

• In-depth knowledge of Workforce Identity & Access Management, Single Sign-On, and Multi-Factor Authentication (MFA)

• Experience with SSO application onboarding and MFA integrations with cloud-based identity providers

• Practical understanding of FIDO2, SAML, OAuth, OIDC, Kerberos, and Federation

• Familiarity with Passwordless authentication, API Gateways, SCIM connectors, and identity platforms such as Ping Identity, Okta, MS Entra, or ForgeRock

• Knowledge of identity proofing and verification technologies, adaptive risk-based authorization, and Zero Trust principles

• Awareness of security and governance policy frameworks such as ISO, NIST, and CSA Controls Matrix

• Expertise in modern software development lifecycles, Agile methodologies, and automated cloud infrastructure deployment

• In-depth understanding of at least one of Microsoft Entra, DUO, Oracle Access Manager, Okta, Auth0, or Ping Identity

• Strong written and verbal communication skills

• Ability to mentor junior talent and influence without formal authority

• Attention to detail with both qualitative and quantitative information

• Effective problem-solving skills and the ability to adapt independently to change

• Must be legally authorized to work in the United States for any employer without sponsorship

• Successful completion of an interview is required

• Reliable and punctual attendance is a key function

• Preferred: Master's degree

• Preferred: CISA, CISM, or CISSP certifications

• Preferred: 6+ years of related experience

• Preferred: Knowledge of SOX, PCI, FAA, GDPR, and PII compliance regulations

• Preferred: Experience with large-scale identity transformation, cloud migration, Passwordless technologies, IAM in airline or transportation sectors, and AI/ML or automated solutions

🏝️ Benefits

• Top-tier health and wellness benefits

• Parental leave

• 401(k)

• Space-available travel privileges

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Accident and disability coverage

• Employee assistance program

• Commuter benefits

• Paid holidays

• Paid time off

• Flight privileges

• Employee-run Business Resource Group communities

• Bonus and/or long-term incentive compensation awards