IAM Software Engineer

About the role

The Information Technology group at DTCC delivers secure, reliable technology solutions that enable the firm to be the trusted infrastructure of the global capital markets. The team focuses on workforce access management, implementing risk-based automated access management, policy-based authorization, and enhancing role-based access control capabilities.

Responsibilities

• Design, develop, and integrate custom IAM services that support RBAC, PBAC, PAM, and automated access management.
• Build and enhance risk-based access automation and policy-based authorization frameworks.
• Develop and optimize role-based access capabilities, including birthright access provisioning.
• Write clean, testable code and participate in unit, integration, and regression testing for IAM components.
• Provide Level 3 engineering support, performing root-cause analysis and resolving complex IAM issues.
• Collaborate with product owners, architects, and cross-functional teams to ensure alignment with security, compliance, and governance standards.
• Contribute to continuous improvement of identity services, automation, and engineering best practices.

Requirements

• Minimum of 6-8 years of related experience.
• Bachelor's degree preferred or equivalent experience.
• Talent needed for success: 6–8+ years of software engineering experience.
• Strong programming skills in Java, Python, and database development (SQL/NoSQL).
• Experience building or integrating solutions in IAM, identity governance, or security engineering environments.
• Solid understanding of RBAC, PBAC, authorization models, and identity lifecycle management.
• Experience with scripting and automation for workflow orchestration.

Qualifications

• Hands-on experience with Privileged Access Management solutions.
• Exposure to risk-based access frameworks and adaptive policy enforcement.
• Understanding of access recertification, entitlement management, and identity compliance.
• Experience with modern CI/CD pipelines, API development, or cloud identity services.

Skills

• Strong programming skills in Java, Python, and database development (SQL/NoSQL).
• Experience building or integrating solutions in IAM, identity governance, or security engineering environments.
• Solid understanding of RBAC, PBAC, authorization models, and identity lifecycle management.
• Experience with scripting and automation for workflow orchestration.
• Hands-on experience with Privileged Access Management solutions.
• Exposure to risk-based access frameworks and adaptive policy enforcement.
• Understanding of access recertification, entitlement management, and identity compliance.
• Experience with modern CI/CD pipelines, API development, or cloud identity services.

Benefits

• Competitive compensation, including base pay and annual incentive.
• Comprehensive health and life insurance and well-being benefits, based on location.
• Pension / Retirement benefits.
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Pay

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.

Schedule

We offer a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).