Senior IT Security Engineer (Identity & Customer Access Management)

Job DescriptionOld Republic Bitco is seeking a Senior IT Security Engineer – Identity & Customer Access Management to join our home office located in Davenport, IA. As a respected specialty insurer with 11 branch offices across 10 states, OR Bitco delivers tailored insurance solutions to complex industries such as construction, forest products, and oil and gas. This position is open to hybrid work arrangement, blending flexibility with meaningful in-person collaboration. At OR Bitco, our work is guided by core values. We care deeply about our people, partners, and customers. We are committed to excellence and accountability. We deliver on our promises with integrity and precision, and we strive to make a meaningful impact in everything we do. These values drive our mission to protect the people and industries that keep America running. Join the OR Bitco team and be part of a workplace built on collaboration, open communication, and a positive culture that supports growth and success. If you are passionate about operational excellence and ready to make a measurable impact within a growing, industry-leading organization, OR Bitco offers the platform and challenge you have been seeking.Position Summary:As part of the Cybersecurity team, you will help mature OR Bitco’s Identity and Customer Identity and Access Management (IAM/CIAM) capabilities while supporting the organization’s broader cybersecurity and regulatory objectives. In this role, you will focus on strengthening identity security through effective access policies, role definitions, provisioning and deprovisioning processes, access reviews, authentication and authorization controls, monitoring, and audit evidence.The Senior IT Security Engineer will resolve complex access and identity-related issues, analyze security and compliance requirements, and implement monitor controls that support OR Bitco’s cybersecurity framework and risk management objectives. You’ll apply principles aligned with the NIST Cybersecurity Framework (CSF) and applicable regulatory requirements, including the New York Department of Financial Services (NYDFS) Cybersecurity Regulation, with particular emphasis on governance, risk identification, protection of systems and data, detection of anomalous activity, response, and recovery.In this role, you will be partnered with Cybersecurity, IT, Internal Audit, business stakeholders, and external auditors to ensure identity and security controls are appropriately designed, implemented, documented, monitored, and supported by reliable evidence. Responsibilities will include responding to audit and compliance requests, identifying control gaps, supporting remediation activities, improving role-based access practices, and helping establish sustainable IAM/CIAM processes.As an elevated technical role, the Senior IT Security Engineer will help build the future state of IAM/CIAM at OR Bitco, balancing security, regulatory requirements, operational efficiency, and customer experience. The ideal candidate in this position will provide excellent customer service while troubleshooting access issues and ensuring users have the appropriate access necessary to perform their roles securely and effectively.Primary Responsibilities:Reviews, modifies, and administers identity lifecycle management processes, ensuring timely and accurate provisioning/de-provisioning of user accounts and access rights.Collaborates with cross-functional teams to integrate IAM/CIAM solutions with enterprise applications, directories, and infrastructure components.Facilitates regular access reviews and audits to ensure compliance with regulatory requirements and internal security policies.Conducts identity risk assessments and evaluates business impact related to user, privileged, and customer access to ensure alignment with least privilege and Zero Trust principles.Implements and matures role-based and attribute-based access control models (RBAC/ABAC) across enterprise platforms while enforcing least privilege access principles.Maintains understanding of business processes to aid in managing enterprise identity and access requirements.Troubleshoots IAM/CIAM- related issues, investigates root causes, and implements corrective actions to maintain system availability and integrity.Develops and maintains documentation, procedures, and guidelines related to IAM/CIAM operations and processes.Provides IAM/CIAM technical guidance and mentorship members of the Operations team.Facilitates IAM/CIAM functionality discussions with customers to increase awareness in current role and access definitions.Collaborates with business stakeholders, application owners, and product teams to define, document, and maintain access models, entitlement structures, and role definitions.Work directly with application and systems owners to define and document application integration requirements with Organizational Information ManagementLeads evaluation, selection, implementation, and continuous improvement of IAM, CIAM, PAM, authentication, and access governance technologies.Maintains expertise in security technologies, regulatory requirements, and industry best practices to ensure ongoing effectiveness of IAM controls.Participates in recommending and reviewing changes to internal security related practices/documentation to ensure they are appropriate and current with business requirements and IAM/CIAM best practices. Implements or streamlines new practices or procedures where necessary and updates, facilitates Management review, and company adoption.Participates in and maintains the process for scheduled and unscheduled audits of information technology related security practices and procedures, maintaining a record of the results, and owns the process of reporting and closing any unresolved audit findings to IT and Business management.Supports modern authentication controls including MFA, password-less authentication, federation, SSO, conditional access, identity proofing, and account recovery processes.Performs other duties as assignedQualifications:Bachelor’s degree in Information Technology, Computer Science, Business Information Systems, or related field; equivalent work experience and relevant certifications may be consideredMinimum four years of experience supporting enterprise technology environments in a Service Desk, Client Services, Technical Support, or IT Operations role; insurance or financial services experience preferredDemonstrated experience supporting business applications, enterprise software platforms, and employee technology services within a complex business environmentProven experience troubleshooting endpoint technologies, operating systems, collaboration platforms, Microsoft 365 technologies, mobile devices, business applications, and workplace technologiesExperience supporting identity and access management solutions including Active Directory, Microsoft Entra ID, Intune, MDM platforms, and enterprise authentication technologiesDemonstrated ability to independently prioritize workload, manage multiple concurrent requests, and Bachelor's Degree in Computer Science, Information Systems, or Business Administration with Technology as a core component preferred Certificates pertaining to IAM/CIAM and access controls preferred or related work experienceAt least 4-7 years’ experience in IAM/CIAM technology and access governance.Hands-on experience with IAM/CIAM platforms such as Microsoft Azure Active Directory, One Identity Manager, or similar.Experience in organizations experiences large modernization changes, legacy/Technical debt retirement, and SaaS platform (Duck Creek, Kalepa, SNOW, SFDC, EDW) implementationsFamiliarity with the following IT Security concepts is preferred:IT security risk and mitigation strategiesSecurity frameworksRegulatory guidelinesIT security logging and monitoringIT security monitoring toolsControls, best practices, and security protocolsOperating systems, networks, and security fundamentalsThreat knowledgeFamiliarity with the following Identity TechnologiesMicrosoft Entra ID (Azure AD)SailPoint, One Identity, Saviynt, or equivalentActive DirectorySCIM SAMLOAuth 2.0OIDCLDAPSecurity ConceptsZero Trust ArchitecturePAMRBAC and ABACIGAAuthentication and FederationCloud SecurityAzureAWSSaaS Identity IntegrationDemonstrated ability to manage multiple priorities and projectsCritical thinking and problem-solving skillsExcellent oral and written communication skillsPreferred CertificationsCISSPSecurity+SC-300 (Microsoft Identity and Access Administrator) SC-100 (Microsoft Cybersecurity Architect) Certified Identity and Access Manager (CIAM) SailPoint certificationsBenefits: Competitive salary paired with a comprehensive benefits package Generous paid time off, plus 12 paid holidays annually Comprehensive health coverage, including medical, dental, and vision plans Additional protection through accident, critical illness, and hospital indemnity insurance Company-paid life insurance equal to 2 annual salary Company-paid short-term and long-term disability coverage 401(k) Savings and Profit-Sharing Plan through Old Republic Ongoing education, training, and professional development opportunities Support for industry certifications and insurance designations, including financial assistance Opportunities to give back through corporate philanthropy and community service initiatives Optional benefits including travel, commuter, and pet insurance Employee wellness support through a dedicated fitness program Job DetailsJob Type: Full-timeCategory: Information TechnologySalaried: Salaried