Senior IAM Engineer in Chicago

Job Description

A financial services / wealth management organization is growing its security engineering function and is hiring a hands-on IAM-first security engineer. This role is focused on improving programs in a Microsoft/Azure environment.

What you’ll do

• Own and evolve core & Access Management (IAM) capabilities across a Microsoft ecosystem
• Design, implement, and operate controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance
• Partner with security leadership and engineering peers to strengthen posture and security maturity
• Build automation/tooling to scale operations (PowerShell and/or Python)
• Contribute to security architecture initiatives (ex: Zero Trust concepts)

Must-haves

• Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC)
• Strong experience with Microsoft Entra ID / Azure AD
• Working knowledge of MFA, Conditional Access, SSO/federation (SAML/OIDC/OAuth), and access controls
• Scripting/automation skills: PowerShell and/or Python
• Comfort working in a fast-paced, high-ownership environment

Nice-to-haves

• governance / IGA (access reviews, joiner-mover-leaver, lifecycle automation)
• Privileged access concepts (PIM/PAM)
• Exposure to Zero Trust approaches and/or tools (Zscaler-type platforms)
• Familiarity with frameworks like NIST

Location / onsite

• Austin, TX / Chicago, IL / Denver, CO
• 4 days/week onsite