(Azure) IAM Security Engineer

Description

Job Description

A Security Engineer contributes to the success of the Bank by building a safe and sound technology environment for business operations. This individual will apply their passion for security and technology to create secure, stable and easy to use solutions for Bank personnel and other customers in the Bank’s environment. The team this role is a part of focuses on project work and includes experienced, passionate technology security professionals.

• Design, implement and operate security controls for various services in the Microsoft and Amazon cloud, with a primary focus in Azure AD.

• Design and implement access control policies within Azure AD and MDM.

• Design and implement Data Loss Prevention controls in Office 365.

• Assist with CyberArk Upgrades and maintenance

• Analyze requirements and apply knowledge of business needs and security risks to determine appropriate course of action.

• Collaborate with different areas of IT in order to provide security and business technology solutions for the Bank.

• Development of security policy, standard, procedure and design documents.

• Design, engineer, and deploy technologies for application integrations for using SAML, Open ID, or OAuth

• Act as a point of escalation for issues relating to security controls or tools, including (but not limited to) SSO, MFA, certificates.

• Occasionally provide support off-hours when business critical problems arise.

Skills

Security, Powershell, IAM, Azure AD, O365

Top Skills Details

Security,Powershell,IAM,Azure AD,O365

Additional Skills & Qualifications

Knowledge, Skills, Abilities and Behaviors:

• Active Directory (Azure, On-prem)

• CyberArk (Preferred)

• Windows Servers (2016 and newer)

• Azure B2C (preferred)

• ADFS (preferred)

• 5 or more years Azure experience

• Scripting/automation experience such as Python and PowerShell

• Experience writing documentation ranging from deep technical write-ups to end user guides.

• 4 year college degree in Information Technology or equivalent experience

• Security certifications (CISSP, GSEC, CCSP, etc.) preferred

• Microsoft 365 certificates preferred

• Ability to work both independently and with a team while managing workload with minimal supervision.

• Working knowledge of authentication and authorization protocols.

• Ability to address conflict with peers and others in the organization.

• Strong attention to detail and commitment to delivering quality solutions.

• Knowledge of IT security controls and IT infrastructure, especially IAM processes.

• Outstanding communication skills (verbal, written, visualization). This role requires the ability to communicate difficult concepts clearly and the desire to listen to understand.

Understand Authentication process

Conditional access policies

IAM Security Engineering

They aren’t setting up groups, but they are responsible for Connections

setup Azure AD connections

ideal candidate is an Azure conditional access expert

Ideally candidate comes from consulting background /MSP (they are able to adapt to different environment)

writing processes and standards

thorough understanding of authentication processes.

Rule-based access

Current projects: getting rid off ADS, , Cyber Ark ramp up maturity and readiness,

CyberArk- will be nice to have- can work with other tools that are similar or related. Biggest this is the Azure AD component

Experience Level

Intermediate Level

This is a Contract to Hire position based out of Chicago, IL.

The pay range for this position is $70.00 - $75.00/hr.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

This is a hybrid position in Chicago,IL.

This position is anticipated to close on Jun 30, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We’re a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We’re strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.