IGA Engineer

About the role

The Cboe Identity Governance and Administration team is hiring an IGA engineer to contribute to the maturation of our enterprise IGA platform. You will implement processes for identity lifecycle management and access governance (RBAC/ABAC, certifications) across hybrid environments (on-premises + cloud).

Responsibilities

• Engineer & Operate Core IGA Platforms – Participate in the design and maintenance of identity platforms (e.g., Microsoft Entra ID/AD, SailPoint/Saviynt) for RBAC/ABAC, SSO, provisioning/deprovisioning, and access policy enforcement.
• Lifecycle Automation & Integrations – Build automated Joiner/Mover/Leaver workflows, connectors (SCIM/REST/JDBC), app onboarding, and identity events using PowerShell, Python, APIs (e.g., Microsoft Graph, Okta APIs).
• Tier 2 Customer Support – Serve as an escalation point for our IGA Governance and Operations team to support our Infrastructure partners and IGA users. Monitor support queue as needed to provide operational coverage.
• Access Governance & Compliance – Implement access requests/approvals, access certifications, and audit-ready controls.
• Monitoring, Troubleshooting & Runbooks – Instrument security and system logging, tune performance, and maintain runbooks and SOPs.
• Standards & Roadmap – Contribute to IGA policies/standards, document designs, and mentor engineers; evaluate emerging identity tech/features and drive safe adoption.
• Partner with GRC and Audit teams to meet SOX/NIST/GDPR and regulatory requirements and remediate findings.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 2+ years of IGA/IAM engineering experience within complex enterprise environments.
• Experience with GenAI coding assistance and leveraging AI to improve IGA processes.
• Solid knowledge of Directory Services/LDAP, identity logging/monitoring, and CI/CD/change processes.
• Stakeholder communication – proficient in documenting architectural and technical specifications and translating complex identity concepts for non-technical audiences.

Qualifications

• Experience with Microsoft Entra ID, SailPoint, and/or Saviynt.
• Knowledge of RBAC/ABAC, SSO, and access policy enforcement.
• Experience with SCIM, REST, and JDBC connectors.
• Ability to build and maintain automation scripts using PowerShell, Python, and APIs.
• Experience with monitoring and troubleshooting systems.
• Strong stakeholder communication and documentation skills.

Skills

• Software engineering and quality assurance discipline.
• Collaboration and mentoring skills.
• Expertise in directory services and identity logging/monitoring.
• Experience with CI/CD/change processes.
• Ability to work with stakeholders and translate complex identity concepts.

Benefits and Perks

At Cboe Global Markets, we offer:

• Fair and competitive salary and incentive compensation packages with an upside for overachievement.
• Generous paid time off, including vacation, personal days, sick days and annual community service days.
• Health, dental and vision benefits, including access to telemedicine and mental health services.
• A 2:1 401(k) match, up to 8% match immediately upon hire.
• Discounted Employee Stock Purchase Plan.
• Tax Savings Accounts for health, dependent and transportation.
• Employee referral bonus program.
• Paid parental leave and fertility benefits.
• On-site gyms and discounts to other fitness centers.

Pay

The anticipated base salary range for this role is $93,500-$133,100, with actual compensation determined by job-related factors such as skills, relevant experience, education, internal alignment, and location.

Schedule

This role follows a four day in office work model and can be based out of our Chicago or Overland Park, Kansas office.