Principal Identity & Access Management (IAM) Engineer
Early Warning Services3 days ago
Base Salary
$184k - $230k/yr
Responsibilities
- Develop and implement IAM strategies aligned with organizational security objectives.
- Architect, design, enhance, and maintain identity management, identity governance, authentication, authorization, and privileged access management solutions.
- Design and implement IGA solutions using platforms such as Saviynt and SailPoint.
- Establish privileged-account policies, monitor compliance, and support security governance, audits, and regulatory requirements.
- Evaluate vendors and technologies, manage vendor relationships, and implement solutions meeting business requirements and budget forecasts.
- Mentor, train, coach, and guide Systems Engineers.
- Design, develop, document, test, and debug configuration-management patterns and infrastructure-as-code.
- Perform systems engineering, installation, configuration, maintenance, monitoring, production support, and Tier III escalation support.
- Analyze system health and availability data, perform root-cause analysis, and implement measures to improve performance and prevent service degradation.
- Implement security patches, non-security patches, technology upgrades, vulnerability-management changes, and lifecycle-management updates.
- Create and maintain technology policies, procedures, standards, and documentation.
- Participate in change-management processes, support risk management, and protect system and data integrity and confidentiality.
- Provide on-call support as part of a team rotation and collaborate with internal customers, business teams, and external vendors.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
- Typically 15 years of progressive experience, including 10 years as a senior IAM engineer or architect in IAM, identity management, and privileged access management.
- Strong understanding of security compliance frameworks, governance, and risk management.
- In-depth knowledge of network protocols, Active Directory, and security best practices.
- Practical knowledge of Birthright Applications, role-based access, and least-privileged access.
- Strong analytical, organizational, communication, interpersonal, customer-service, collaboration, facilitation, negotiation, and vendor-relationship skills.
- Ability to manage multiple projects, meet deadlines, work independently and under pressure, and maintain accuracy and professionalism.
- Working knowledge of Microsoft Office, including Word, Excel, and Outlook.
- Successful completion of a background and drug screen.
- Relevant certifications such as PCI, CIAM, CompTIA Security+, CISSP, CISM, or CISA are preferred.
Benefits
- Hybrid work model with a primarily office-based work environment in Chicago, Illinois.
- Base pay of $184,000–$230,000 per year, plus eligibility for a discretionary incentive plan.
- Medical, dental, and vision coverage, with company HSA contributions and flexible spending accounts.
- 401(k) retirement plan with a 100% company safe-harbor match on the first 6% deferred, immediately upon eligibility.
- Flexible time off for exempt employees or generous PTO for non-exempt employees, plus 11 paid company holidays and one paid volunteer day.
- 12 weeks of paid parental leave and Maven Family Planning support.
- Requires participation in an on-call team rotation.
Categories
About Early Warning Services
Early Warning Services builds payment networks and fraud/risk mitigation solutions for U.S. banks and credit unions. It operates the Zelle peer-to-peer payments network and is rolling out Paze, a digital wallet, alongside identity verification and account risk services. Headquartered in Scottsdale, Arizona, it is owned by a consortium of major U.S. banks and partners with thousands of financial institutions nationwide.