IAM Engineer: SSO/MFA & Okta Expert

Aon; Illinois; On-site; USD 92,000 - 130,000; Full time

Benefits offered by this job

401(k) with employer contributions

Employee stock purchase plan

Long-term incentive eligibility

Job summary

Aon is seeking an IAM Engineer to design, implement, and support authentication across its identity environment. You will partner with technology, security, and business stakeholders to balance security with user experience.

The role focuses on SSO and MFA implementations, with platforms such as Okta and Microsoft Entra, plus REST APIs and JSON integration. You will document architectures and drive improvements in IAM controls.

Qualifications

• Experience designing, implementing, or supporting IAM solutions.
• Experience implementing SSO and MFA for workforce and/or external users, using platforms such as Okta or Microsoft Entra.
• Knowledge of identity and authentication protocols (SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, Kerberos).
• Experience analyzing authentication and authorization logs and troubleshooting complex identity issues.
• Working with REST APIs and JSON.
• Familiarity with GDPR, SOX, ISO 27001, SOC 2 security/compliance frameworks.
• Strong analytical and communication skills; ability to explain technical concepts clearly.
• 3+ years designing and implementing IAM solutions, including SSO and MFA.

Responsibilities

• Design, integrate, test, and support IAM authentication solutions (SSO, MFA).
• Collaborate with stakeholders to define authentication needs and guide implementations.
• Configure and maintain Okta and Microsoft Entra environments, including policies, workflows, and integrations.
• Ensure IAM platforms are secure, reliable, and up to date with patches and monitoring.
• Develop and refine SSO/MFA policies and controls for a seamless user experience.
• Work with REST APIs/JSON to extend identity-platform capabilities.
• Analyze logs to diagnose issues and identify root causes.
• Create IAM documentation, diagrams, and process flows for operations.
• Identify opportunities to improve authentication controls and platform capabilities.

Skills

SSO

MFA

SAML/OIDC/OAuth

LDAP

RADIUS

Kerberos

REST APIs

JSON

IAM design

Security standards

Education

Bachelor's degree in Computer Science or related field

Tools

Okta

Microsoft Entra

Job description

Aon is seeking an IAM Engineer to design, implement, and support authentication across its identity environment. You will partner with technology, security, and business stakeholders to balance security with user experience.

The role focuses on SSO and MFA implementations, with platforms such as Okta and Microsoft Entra, plus REST APIs and JSON integration. You will document architectures and drive improvements in IAM controls.