Senior Systems Engineer - IAM

Job Description

W. R. Berkley is seeking a Senior Systems Engineer to join its enterprise Identity & Access Management team. This individual will serve as a senior technical leader responsible for designing, implementing, and governing authentication and authorization solutions across the organization.

This is a highly visible, project-focused role supporting over 60 business units and customer-facing applications. The ideal candidate will bring deep expertise in Auth0, Okta, OAuth, and OpenID Connect, with the ability to design identity workflows, establish security standards, and serve as an internal consultant on IAM best practices.

The team is focused on modern identity initiatives including fine-grained authorization, AI identity governance, Active Directory modernization, certificate lifecycle automation, and Zero Trust security strategies.

Day-to-Day Responsibilities Design and implement authentication and authorization solutions using Auth0, Okta, Entra ID, and related IAM technologies Partner with application teams to onboard and integrate applications into Auth0 Develop reusable identity patterns, workflows, and standards across the enterprise Lead discussions around authentication, authorization, federation, and identity governance best practices Support implementation of Auth0 Fine-Grained Authorization (FGA) capabilities Establish governance standards and identity controls for AI agents and emerging AI technologies Collaborate with architects, infrastructure teams, developers, and security partners on enterprise identity initiatives Create, manage, and deliver sprint commitments within a scaled Agile environment Develop automation solutions utilizing scripting, GitHub, GitLab, and infrastructure-as-code principles Improve Active Directory lifecycle management and service account governance Support certificate automation and modernization efforts related to PKI and post-quantum readiness Assist with ServiceNow integrations and identity-related workflow automation Provide guidance and mentorship to junior engineers and offshore support resources Participate in a rotating on-call schedule supporting enterprise identity platforms Drive continuous improvement initiatives focused on security, automation, and operational efficiency

The compensation for this position will be $107,000 - $198,000 based on years of experience.

Skills and Requirements

-5+ years of Identity & Access Management (IAM) design and engineering experience -3+ years of experience with Auth0, Okta, Microsoft Entra ID, or similar enterprise identity platforms -Strong hands-on experience implementing and supporting Auth0 or Okta -Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC) -Strong understanding of authentication vs. authorization concepts -Ability to explain and implement Access Tokens, ID Tokens, JWTs, and modern identity architectures -Experience with SAML, Federation, and Single Sign-On (SSO) -Experience creating enterprise IAM standards, workflows, and governance models -Experience onboarding applications into enterprise identity platforms -Understanding of Zero Trust security principles -Experience working within Agile or SAFe environments -Strong communication skills and ability to work directly with technical and business stakeholders -Ability to independently own projects from design through implementation -Experience with Auth0 Fine-Grained Authorization (FGA) -Microsoft Entra ID and Active Directory experience -IAM automation experience using scripting, GitHub, GitLab, or Infrastructure as Code -Identity Governance, lifecycle management, or ServiceNow integration experience -Exposure to PKI, certificate management, or Zero Trust initiatives -Experience supporting AI identity governance or emerging identity security technologies

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on click.appcast.io.