Senior IAM Engineer

About the role

The Sr. IAM Engineer position at FHLBank Chicago is responsible for implementing and supporting IAM product enhancements. This role requires a strong understanding of IAM domains including SSO, MFA, IGA, Password Management, and Privileged Access Management.

Responsibilities

• Develop and mature IAM solutions that protect assets from unauthorized access
• Provide hands-on expertise with IAM solutions that align with the bank’s business needs and strategic objectives
• Support application integrations and continuous onboarding on new systems
• Collaborate with Application Owners and IT Support teams to expand IAM automation
• Implement critical enhancements and bug fixes as part of a mature product management lifecycle
• Produce and validate accurate IAM reporting for monthly statistics and compliance
• Support the delivery of application integrations with IAM solutions while developing comprehensive Role and Access design patterns
• Define and maintain build procedures for consistency checks and completeness
• Work with other IT teams in the design, development, and implementation of IAM solutions as an SME in the IAM space
• Mentor and provide technical assistance to junior team members for continuous development of internal talent
• Document and update operating procedures for knowledge transfer
• Identify and recommend IAM solutions that meet team’s strategic direction

Requirements

• Bachelor's Degree
• Strong understanding of SDLC Methodologies and CI/CD pipeline
• CIAM, MS Certified IAM Admin, or other Information Security related certifications
• 4-7 Years engineering experience with core Identity products including Active Directory, Azure Entra, OIM IGA, and CyberArk
• Experience with time management skills, prioritization, and tracking details to meet deadlines
• Microsoft Office Suite, Azure DevOps
• Expertise in developing and implementing product enhancements to mature an existing IAM program
• Direct experience in OneIdentity application onboarding and support of enterprise applications with automated provisioning requirements

Qualifications

• Working knowledge at a protocol level across IAM domains such as SSO, MFA, IGA, Password Management, and Privileged Access Management
• Experience using time management skills such as prioritizing/organizing and tracking details to meet deadlines across multiple projects
• Expertise in developing and implementing product enhancements to further mature an existing IAM program
• Direct experience in OneIdentity application onboarding and support of enterprise applications with automated provisioning requirements

Skills

• Strong troubleshooting and problem-solving skills
• Awareness and implementation expertise involving certificate management, SSL handshaking, and encryption technologies while integrating with IAM solutions
• Experience with load balancers, clustering, high availability, and disaster recovery technologies
• Experience with Java, J2EE, Perl Scripts, and PowerShell

Benefits

Comprehensive benefits package including a highly competitive compensation and bonus package, retirement program (401(k) and Pension), medical, dental, and vision insurance, a Lifestyle Spending Account, and 11 paid holidays per year. Visit FHLBCbenefits.com for more details.

Pay

$90,400.00 - $150,700.00