IAM Engineer

IT Security Engineer
Identify and Access Management (IAM) Focus
Chicago, IL – 1 day onsite in the loop, 4 days work from home after first 90 days of onsite training

The IT Security Engineer will focus on the IAM function of IT Security, identifying, delivering and supporting the technology used to deliver on all IAM initiatives, which is specifically designed to ensure the user identities, accounts, credentials and system access are fully and completely managed for all system users.

We use the following tech stack to accomplish this, so if you have experience in these areas, that would be great, but experience with the specific tools are not required: Okta Verify/SSO, Cyberark, Windows Server, Azure, AD, Azure AD. You'll work with the IAM Manager and IAM Architect to execute on new project initiatives, in addition to supporting daily IAM engineering operations.

Ideally looking for candidates working in hybrid cloud environments, or having a background with both on-prem and cloud-based IAM.

What you'll be doing

• You'll be working in the following functional areas: policy driven security, Identity Governance, Access Management, and Privileged access management, user provisioning/de-provisioning, and federation.
• Thus, you will work with the IAM Manager to build out and oversee the IAM function's technical controls and its related activities including planning, testing, reporting and delivering IAM services.
• The analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization / Authentication and Account Creation / Management / Provisioning / Retirement in data repositories. Including; strategy, organizational design, process re-engineering and technology implementation.
• Oversee the implementation of all current solutions to ensure they are configured appropriately and are delivering maximum value. Review current documentation such as Procedures, run books, and Knowledge Base Articles used by the Service Desk.
• Engage and interact with other IT Departmental Engineers to ensure future efforts result in continued uninterrupted delivery of all IAM services.
• Provide support with respect to requirements gathering, project management and delivery of one or more Identity platforms, such as SailPoint (Identity IQ), Okta, and Saviynt.
• Serve as the central point of contact for information security and IAM policy and process related issues.
• Address Vulnerabilities, Pentest findings and audit issues in a timely manner.
• Participate in a 24x7x365 on-call rotation
• Stay abreast of industry trends, solution landscape and market conditions and update peers and management accordingly.

Skills we're seeking

• 3+ years of experience in IT Security
• At least 2 years of experience with IAM Engineering
• Must have strong Active Directory experience

Biggest nice to have skills, in no particular order:

• Okta Verify, SailPoint (Identity IQ) or Saviynt experience (ideally Okta Verify)
• Cyberark
• Azure / Azure AD / GPO Management
• Windows Server

Other nice to have experience:

• Bachelor's Degree and/or relevant certifications
• GRC experience with frameworks such as COBIT, ISO and/or ITIL
• Experience in other areas of IT Security
• Experience working in a professional services environment