IAM Engineer

Old Republic; United States; Hybrid; USD 110,000 - 160,000; Full time

Job summary

Old Republic is seeking an Identity & Access Management Engineer to advance its IAM Center of Excellence. The role combines hands-on engineering with collaboration across cybersecurity, infrastructure, and application teams to deliver secure authentication, provisioning, and access management solutions.

The engineer will focus on SSO, MFA, lifecycle management, identity integrations, privileged access management, and identity governance within a large, enterprise-scale environment.

Qualifications

• 3-5 years of experience in Identity & Access Management, Information Security, Systems Engineering, or a related technical discipline.
• 2-3 years of hands-on experience with Okta, Microsoft Entra ID (Azure AD), or a similar enterprise identity platform.
• Experience implementing or supporting SSO and MFA solutions in enterprise environments.
• Working knowledge of federation and authentication protocols, including SAML, OIDC, OAuth 2.0, and SCIM.
• Experience supporting Active Directory and directory synchronization technologies.
• Understanding of identity lifecycle management, access provisioning, and role-based access controls.
• Strong troubleshooting and problem-solving skills.
• Ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Strong organizational skills with the ability to manage multiple priorities and projects.
• Experience creating and maintaining technical documentation.

Responsibilities

• Act as a hands on technical engineer of IAM technologies, in collaboration with other engineers, architects, etc. across Old Republic
• Configure IAM technologies to align with enterprise policies/standards, MFA, adaptive access controls, session management, and secure tenant baselines
• Partner with infrastructure and directory teams on Active Directory, DNS, and domain dependencies
• Engineer and support application integrations using SAML, OIDC, OAuth 2.0, SCIM, and APIs
• Implement and maintain Active Directory and cloud directory integrations in multi domain and multi forest environments
• Implement and enhance joiner/mover/leaver automation using Okta Lifecycle Management and Workflows in conjunction with an enterprise IGA platform.
• Support assigned IAM service requests and incidents involving identity, authentication, access provisioning, and related technologies.
• Produce and maintain technical documentation, standards, and operating procedures
• Collaborate closely with cybersecurity leadership, project managers, infrastructure teams, application owners, and subsidiary IT teams
• Support audits, risk assessments, and security reviews involving identity services, where required.
• Participate in on-call support and production change activities as needed (which may occur outside business hours)

Skills

Okta

Azure AD

SSO

MFA

SCIM

Active Directory

Identity lifecycle

Tools

Okta Lifecycle Management

Okta Workflows

Saviynt

SailPoint

CyberArk

Job description

Location/Schedule: Hybrid or Remote (Chicago, IL or Tampa, FL)

Classification: Full-Time / Exempt

Who We Are:

Old Republic is a leading specialty insurer that operates diverse property & casualty and title insurance companies. Founded in 1923 and a member of the Fortune 500, we are a leader in underwriting and risk management services for business partners across the United States and Canada. Our specialized operating companies are experts in their fields, enabling us to provide tailored solutions that set us apart.

Position Overview:

Old Republic is seeking an Identity & Access Management Engineer to support and evolve its Identity and Access Management Center of Excellence across Old Republic and its operating companies. This is a hands-on technical role focused on implementing, supporting, and improving identity and access management capabilities.

The IAM Engineer will work closely with cybersecurity, infrastructure, and application teams to deliver secure authentication, provisioning, and access management solutions. Key areas of focus include Single Sign-On (SSO), Multi-Factor Authentication (MFA), lifecycle management, identity integrations, privileged access management, and identity governance initiatives.

This position offers an opportunity to work on enterprise-scale IAM technologies while gaining experience across a diverse and complex technology environment.

Essential Job Functions:

• Act as a hands on technical engineer of IAM technologies, in collaboration with other engineers, architects, etc. across Old Republic
• Configure IAM technologies to align with enterprise policies/standards, MFA, adaptive access controls, session management, and secure tenant baselines
• Partner with infrastructure and directory teams on Active Directory, DNS, and domain dependencies
• Engineer and support application integrations using SAML, OIDC, OAuth 2.0, SCIM, and APIs
• Implement and maintain Active Directory and cloud directory integrations in multi domain and multi forest environments
• Implement and enhance joiner/mover/leaver automation using Okta Lifecycle Management and Workflows in conjunction with an enterprise IGA platform.
• Support assigned IAM service requests and incidents involving identity, authentication, access provisioning, and related technologies.
• Produce and maintain technical documentation, standards, and operating procedures
• Collaborate closely with cybersecurity leadership, project managers, infrastructure teams, application owners, and subsidiary IT teams
• Support audits, risk assessments, and security reviews involving identity services, where required.
• Participate in on-call support and production change activities as needed (which may occur outside business hours)

Qualifications:

• 3-5 years of experience in Identity & Access Management, Information Security, Systems Engineering, or a related technical discipline.
• 2-3 years of hands-on experience with Okta, Microsoft Entra ID (Azure AD), or a similar enterprise identity platform.
• Experience implementing or supporting SSO and MFA solutions in enterprise environments.
• Working knowledge of federation and authentication protocols, including SAML, OIDC, OAuth 2.0, and SCIM.
• Experience supporting Active Directory and directory synchronization technologies.
• Understanding of identity lifecycle management, access provisioning, and role-based access controls.
• Strong troubleshooting and problem-solving skills.
• Ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Strong organizational skills with the ability to manage multiple priorities and projects.
• Experience creating and maintaining technical documentation.

Preferred Qualifications

• Experience with Okta Workforce Identity, Okta Workflows, or Okta Lifecycle Management.
• Exposure to Identity Governance and Administration (IGA) platforms such as Saviynt or SailPoint.
• Familiarity with Privileged Access Management (PAM) solutions such as CyberArk, Delinea or BeyondTrust.
• Experience supporting cloud identity integrations in AWS, Microsoft Azure, or Google Cloud Platform environments.
• Understanding of security frameworks and standards such as NIST, CIS Controls, ISO 27001/27002, or SOX IT General Controls.
• Relevant certifications such as Okta Certified Professional, Okta Administrator, Security+, SC-300, or similar credentials.

ORI is an Equal Opportunity Employer. ORI provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.