Sr. Staff Identity & Access Management Engineer
Early Warning Services4 days ago
Chicago, IL, USA or Scottsdale, AZ, USAStaff+
Base Salary
$160k - $200k/yr
Responsibilities
- Lead the architecture, design, engineering, integration, and continuous improvement of enterprise IAM solutions across cloud and on-premises environments.
- Provide technical expertise across identity governance, authentication, authorization, privileged access, directory services, least-privilege access, and identity lifecycle management.
- Lead complex IAM initiatives spanning multiple systems, applications, technology teams, and stakeholders.
- Define IAM engineering standards, patterns, technical practices, and secure design guidance.
- Design and enhance provisioning, deprovisioning, access certification, role and entitlement management, and privileged-access processes.
- Integrate IAM platforms with enterprise applications, directories, cloud platforms, HR systems, and authoritative data sources.
- Develop automation and reusable engineering patterns to reduce manual processes and improve control consistency.
- Troubleshoot complex IAM platform, integration, authentication, and access issues and lead root-cause remediation.
- Support security assessments, audits, control reviews, vulnerability management, and remediation activities involving IAM technologies.
- Evaluate emerging identity technologies and recommend improvements based on security, operational, and business value.
- Influence technical decisions, communicate IAM risks and recommendations, mentor engineers, and maintain technical documentation.
- Participate in production support and an on-call rotation as required.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent work experience.
- Typically 12 years of experience or a demonstrated portfolio consistent with the role, including significant experience engineering enterprise IAM solutions.
- Advanced expertise in identity lifecycle management, authentication, authorization, identity governance, privileged access, directory services, least-privilege access, and role-based access.
- Experience designing, integrating, and supporting IAM solutions in complex enterprise cloud and/or on-premises environments.
- Experience leading technically complex IAM initiatives across multiple applications, platforms, teams, or business functions.
- Strong understanding of SAML, OAuth 2.0, OpenID Connect, SCIM, and related authentication, federation, and provisioning standards.
- Experience with enterprise directory and identity services such as Active Directory and cloud-based identity platforms.
- Experience integrating IAM solutions through APIs, connectors, scripting, or other integration technologies.
- Ability to solve complex technical problems across multiple systems and influence technical decisions and engineering practices.
- Experience providing technical leadership, coaching, or mentorship to other engineers.
- Preferred experience with Saviynt, SailPoint, Okta, Microsoft Entra ID, Privileged Access Management, Public Key Infrastructure, AWS, Azure, PowerShell, Python, REST APIs, JSON, XML, SQL, and highly regulated environments.
- Relevant IAM, cloud, or information security certifications are preferred.
Benefits
- Hybrid work model.
- Medical, dental, and vision coverage, with company HSA contributions and flexible spending accounts.
- 401(k) plan with a 100% company Safe Harbor Match on the first 6% of deferral, immediately upon eligibility.
- Flexible Time Off for exempt employees or generous PTO for non-exempt employees, plus 11 paid company holidays and a paid volunteer day.
- 12 weeks of paid parental leave.
- Maven Family Planning support for fertility, adoption, surrogacy, pregnancy, postpartum, pediatric, and return-to-work needs.
- The role is based in Phoenix, Arizona or Chicago, Illinois, and includes an on-call rotation as required.
About Early Warning Services
Early Warning Services builds payment networks and fraud/risk mitigation solutions for U.S. banks and credit unions. It operates the Zelle peer-to-peer payments network and is rolling out Paze, a digital wallet, alongside identity verification and account risk services. Headquartered in Scottsdale, Arizona, it is owned by a consortium of major U.S. banks and partners with thousands of financial institutions nationwide.