Senior IAM Engineer (Chicago)

A financial services / wealth management organization is growing its security engineering function and is hiring a hands-on IAM-first security engineer. This role is focused on improving identity programs in a Microsoft/Azure environment .

What you’ll do

• Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem
• Design, implement, and operate identity controls: MFA , Conditional Access , SSO/federation , authorization patterns, and access governance
• Partner with security leadership and engineering peers to strengthen identity posture and security maturity
• Build automation/tooling to scale identity operations ( PowerShell and/or Python )
• Contribute to security architecture initiatives (ex: Zero Trust concepts)

Must-haves

• Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC)
• Strong experience with Microsoft Entra ID / Azure AD
• Working knowledge of MFA , Conditional Access , SSO/federation (SAML/OIDC/OAuth), and access controls
• Scripting/automation skills: PowerShell and/or Python
• Comfort working in a fast-paced, high-ownership environment

Nice-to-haves

• Identity governance / IGA (access reviews, joiner-mover-leaver, lifecycle automation)
• Privileged access concepts ( PIM/PAM )
• Exposure to Zero Trust approaches and/or tools (Zscaler-type platforms)
• Familiarity with frameworks like NIST

Location / onsite

• Austin, TX / Chicago, IL / Denver, CO
• 4 days/week onsite