Senior IAM Engineer

Brief DescriptionThe Senior Identity & Access Management (IAM) Engineer is responsible for the implementation, operation, and continuous improvement of identity and access management capabilities across the enterprise. This role leads the design and enforcement of identity controls to ensure secure, efficient, and compliant access to systems and data.The position works closely with security leadership, IT teams, and application owners to implement scalable identity solutions, strengthen authentication and access controls, and support evolving business and security requirements.Specific DutiesIdentity & Access Management EngineeringDesigns, implements, and maintains IAM solutions, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federationConfigures and manages identity platforms (e.g., Microsoft Entra ID, Okta, or similar)Implements and maintains Conditional Access policies aligned to organizational security requirementsIntegrates applications with identity providers using standard protocols (e.g., SAML, OAuth, OpenID Connect)Access Control & AuthenticationEstablishes and enforces authentication and access control standards across the environmentManages and continuously improves MFA strategy, including enforcement, exclusions, and user experience considerationsSupports secure onboarding of applications and services into centralized identity systemsReviews and improves role-based and attribute-based access models where applicablePrivileged Access & Non-Human Identity ManagementEstablishes and maintains controls for privileged access, including administrative roles and elevated permissionsSupports the implementation and ongoing improvement of Privileged Access Management (PAM) capabilitiesDevelops and enforces standards for service accounts and other non-human identities, including credential management and access restrictionsIdentifies opportunities to reduce standing privilege and improve least privilege across systems and platformsPartners with infrastructure and application teams to improve visibility and governance of non-human identitiesIdentity Lifecycle & GovernanceSupports identity lifecycle processes for both human and non-human identities, including provisioning, deprovisioning, and access changesIdentifies opportunities to improve automation and consistency in access management workflowsPartners with IT and business teams to ensure appropriate access controls are implemented and maintainedContributes to the maturation of identity governance and privileged access capabilities over timeOperational Support & TroubleshootingTroubleshoots and resolves identity-related issues, including authentication failures and access inconsistenciesSupports incident response efforts involving identity or access-related eventsMonitors IAM systems for reliability, performance, and security issuesCollaboration & Continuous ImprovementWorks with cross-functional teams to ensure identity services are integrated into new and existing systemsEvaluates and recommends improvements to IAM tools, configurations, and processesSupports ongoing maturation of identity capabilities, including privileged access and identity governanceStays current with evolving identity threats, technologies, and best practicesPractice Ownership and Project OversightOwns and maintains security standards, control requirements, and guidance within the assigned security practice domainLeads security scoping activities for enterprise initiatives involving controls within the assigned practice areaDefines security requirements, deliverables, and acceptance criteria for initiatives impacting the practice domainOversees alignment of implementation plans to established security standardsCollaborates with project managers and business stakeholders to ensure security milestones are defined, tracked, and documentedEscalates material deviations from established standards and supports formal risk documentation where appropriateMetrics & ReportingDevelops and maintains key performance indicators and metrics related to the assigned security practice domainProvides periodic reporting on control maturity, risk posture, and initiative progressCommunicates practice-level performance insights to security leadership and relevant stakeholdersKnowledge/Skills Required/PreferredPersonal:Detail-oriented with a focus on accuracy and consistency in access control implementationStrong sense of ownership and accountability for assigned responsibilitiesCurious and proactive in identifying opportunities to improve security and processesWillingness to learn and adapt to evolving technologies and security threatsCollaborative mindset with a focus on enabling the business securelyDemonstrates accountability for outcomes and ability to operate with limited directionComfortable working through ambiguity and making sound decisionsProfessional:Ability to work effectively with cross-functional teams including IS, application owners, and business stakeholdersStrong problem-solving and analytical skills, with the ability to diagnose and resolve complex issuesAbility to manage multiple priorities and deliver work in a structured and timely mannerStrong written and verbal communication skills including the ability to explain technical concepts to non-technical audiencesAbility to document processes, configurations, and standards clearly and conciselyAbility to make informed technical decisions and provide guidance on identity-related implementationsAbility to influence stakeholders and drive adoption of security controls and standardsTechnical:Strong understanding of identity and access management concepts including authentication, authorization, and federationKnowledge of identity protocols such as SAML, OAuth 2.0, and OpenID ConnectFamiliarity with Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Conditional Access conceptsUnderstanding of identity lifecycle management including provisioning and deprovisioning processesFamiliarity with privileged access management (PAM) concepts and service account governanceAbility to troubleshoot identity and access issues across integrated systemsAbility to design and implement access control strategies aligned to security requirementsStrong understanding of modern identity threats and mitigation techniquesEducation and ExperienceEducation:Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience) Experience:5+ years of experience in identity and access management or related security engineering rolesHands-on experience with IAM platforms such as Microsoft Entra ID, Okta, SailPoint, or similarExperience implementing SSO, MFA, and identity federation solutionsStrong understanding of authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect)Experience designing and implementing Conditional Access or equivalent access control policiesFamiliarity with identity lifecycle management and access provisioning processesFamiliarity with privileged access management (PAM) concepts and service account governanceAbility to troubleshoot complex identity and access issues across integrated systemsRelated certifications:Relevant certifications such as Microsoft Identity certifications, CISSP, CISM, or similar are preferred but not requiredAdditional CriteriaSchedule flexibility to allow for availability required during the CAP’s non-business hours for activities such as resolution of critical issues or outages, managing off-hours maintenance, meetings with offshore teams, or other critical business needs.Travel is required when necessary; expected to be less than 10%.Candidates must reside within 75 miles of Northfield, IL and meet in-office requirements.Salary: $118,000 - $150,000JobFamilyComputer SciencePayTypeSalary