IAM Engineer: SSO & MFA Security Lead

Aon; Chicago (IL); On-site; USD 92,000 - 130,000; Full time

Benefits offered by this job

401(k) plan

Employee stock purchase plan

Medical, dental and vision insurance

Paid time off

Job summary

Aon is seeking an Identity and Access Management Engineer (Authentication) to design, implement, and support IAM solutions focused on SSO and MFA across the enterprise. You will collaborate with technology and business teams to balance security with user experience.

Responsibilities include configuring Okta and Microsoft Entra, building REST/JSON based identity capabilities, and creating clear documentation to support ongoing operations and governance.

Qualifications

• Professional experience designing, implementing, or supporting IAM solutions.
• Experience implementing and integrating SSO and MFA technologies (Okta, Microsoft Entra).
• Knowledge of identity standards and protocols (SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, Kerberos).
• Experience analyzing authentication/authorization logs and troubleshooting identity issues.
• Experience with REST APIs and JSON.
• Familiarity with GDPR, SOX, ISO 27001, SOC 2.
• Strong analytical and problem-solving skills with ability to derive root causes.
• Effective written and verbal communication; able to explain technical concepts.
• Collaboration across technology and business teams with strong documentation skills.
• 3+ years of IAM design/implementation experience, including SSO/MFA.

Responsibilities

• Design, implement, and support IAM authentication solutions, focusing on SSO and MFA.
• Collaborate with technology, security, and business stakeholders to define IAM patterns.
• Configure and maintain Okta and Microsoft Entra platforms, policies, workflows, and integrations.
• Ensure IAM platforms are secure, reliable, and well-supported through monitoring and patching.
• Refine SSO/MFA policies for security and user experience.
• Develop identity-platform capabilities using REST APIs and JSON.
• Analyze authentication logs to diagnose issues and pinpoint root causes.
• Create IAM documentation, diagrams, and process flows for design and operations.
• Identify opportunities to improve authentication controls and platform capabilities.

Skills

SSO

MFA

Okta

Microsoft Entra

SAML

OAuth/OIDC

SCIM

LDAP

RADIUS

Kerberos

REST APIs

JSON

Security frameworks

Analytical skills

Communication

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or related field

Tools

Okta

Microsoft Entra

Job description

Aon is seeking an Identity and Access Management Engineer (Authentication) to design, implement, and support IAM solutions focused on SSO and MFA across the enterprise. You will collaborate with technology and business teams to balance security with user experience.

Responsibilities include configuring Okta and Microsoft Entra, building REST/JSON based identity capabilities, and creating clear documentation to support ongoing operations and governance.