IAM Engineer: SSO/MFA Secure Access Specialist

Aon plc; Chicago (IL); Hybrid; USD 92,000 - 130,000; Full time

Benefits offered by this job

401(k) plan

Employee stock purchase plan

Long-term incentive

Medical, dental and vision insurance

Paid time off and holidays

Commuter benefits

Employee assistance program

Job summary

Aon plc seeks an IAM Engineer—Authentication to design, implement, and support authentication capabilities across its identity environment in Chicago. You will partner with technology and business teams to balance security, reliability, and user experience while driving practical IAM patterns.

The role requires expertise in SSO and MFA, experience with Okta or Microsoft Entra, and a track record of securing identity platforms through monitoring, troubleshooting, and documentation.

Qualifications

• Professional experience designing, implementing, or supporting IAM solutions.
• Experience implementing and integrating SSO and MFA technologies for workforce and/or external user environments, including platforms such as Okta or Microsoft Entra.
• Working knowledge of identity and authentication standards and protocols such as SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, and Kerberos.
• Experience analyzing authentication and authorization logs and troubleshooting identity issues.
• Working experience with REST APIs and JSON.
• Familiarity with security/compliance frameworks (GDPR, SOX, ISO 27001, SOC 2).
• Analytical and problem-solving skills with the ability to explain technical concepts clearly.
• Ability to collaborate across teams and document solutions clearly.
• 3+ years of relevant IAM design/implementation experience.

Responsibilities

• Design, implement, and support IAM authentication solutions with focus on SSO and MFA.
• Partner with stakeholders to understand needs and guide IAM pattern choices.
• Configure and maintain Okta and Microsoft Entra policies, workflows, and integrations.
• Ensure IAM platforms are secure, reliable, and well-supported through monitoring and patching.
• Develop and refine SSO/MFA policies balancing security and user experience.
• Analyze logs to diagnose issues and implement fixes.
• Create IAM documentation, diagrams, and process flows.
• Identify opportunities to improve authentication controls and platform capabilities.

Skills

IAM

SSO

MFA

Okta

Microsoft Entra

SAML

OIDC

REST APIs

JSON

LDAP

Kerberos

RADIUS

Documentation

Education

Bachelor's degree (CS/IS/Engineering)

Tools

Okta

Microsoft Entra

LDAP

Job description

Aon plc seeks an IAM Engineer—Authentication to design, implement, and support authentication capabilities across its identity environment in Chicago. You will partner with technology and business teams to balance security, reliability, and user experience while driving practical IAM patterns.

The role requires expertise in SSO and MFA, experience with Okta or Microsoft Entra, and a track record of securing identity platforms through monitoring, troubleshooting, and documentation.