Identity and Access Management Engineer (Authentication)

Aon; Chicago (IL); On-site; USD 92,000 - 130,000; Full time

Benefits offered by this job

401(k) plan

Employee stock purchase plan

Medical, dental and vision insurance

Paid time off

Job summary

Aon is seeking an Identity and Access Management Engineer (Authentication) to design, implement, and support IAM solutions focused on SSO and MFA across the enterprise. You will collaborate with technology and business teams to balance security with user experience.

Responsibilities include configuring Okta and Microsoft Entra, building REST/JSON based identity capabilities, and creating clear documentation to support ongoing operations and governance.

Qualifications

• Professional experience designing, implementing, or supporting IAM solutions.
• Experience implementing and integrating SSO and MFA technologies (Okta, Microsoft Entra).
• Knowledge of identity standards and protocols (SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, Kerberos).
• Experience analyzing authentication/authorization logs and troubleshooting identity issues.
• Experience with REST APIs and JSON.
• Familiarity with GDPR, SOX, ISO 27001, SOC 2.
• Strong analytical and problem-solving skills with ability to derive root causes.
• Effective written and verbal communication; able to explain technical concepts.
• Collaboration across technology and business teams with strong documentation skills.
• 3+ years of IAM design/implementation experience, including SSO/MFA.

Responsibilities

• Design, implement, and support IAM authentication solutions, focusing on SSO and MFA.
• Collaborate with technology, security, and business stakeholders to define IAM patterns.
• Configure and maintain Okta and Microsoft Entra platforms, policies, workflows, and integrations.
• Ensure IAM platforms are secure, reliable, and well-supported through monitoring and patching.
• Refine SSO/MFA policies for security and user experience.
• Develop identity-platform capabilities using REST APIs and JSON.
• Analyze authentication logs to diagnose issues and pinpoint root causes.
• Create IAM documentation, diagrams, and process flows for design and operations.
• Identify opportunities to improve authentication controls and platform capabilities.

Skills

SSO

MFA

Okta

Microsoft Entra

SAML

OAuth/OIDC

SCIM

LDAP

RADIUS

Kerberos

REST APIs

JSON

Security frameworks

Analytical skills

Communication

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or related field

Tools

Okta

Microsoft Entra

Job description

Identity and Access Management Engineer (Authentication)

Are you passionate about building secure, seamless authentication experiences? Do you enjoy solving complex identity challenges while partnering across technology and the business?

Join Aon and help design, enhance, and support identity and access management solutions that strengthen security while creating a reliable experience for colleagues and clients.

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one engaged team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

In this role, you will help design, implement, and support authentication capabilities across Aon's identity environment. You will partner with technology and business stakeholders to develop practical solutions that balance security, reliability, and user experience.

• Design, integrate, test, and support Identity and Access Management (IAM) authentication solutions, with a focus on Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Partner with technology, security, and business stakeholders to understand authentication needs, recommend appropriate IAM patterns, and guide solution implementation.
• Configure and maintain authentication platforms such as Okta and Microsoft Entra, including policies, workflows, and integrations.
• Help ensure authentication platforms remain secure, reliable, current, and well supported through effective monitoring, maintenance, and patching.
• Design and refine SSO and MFA policies and controls that strengthen security while supporting a seamless user experience.
• Develop and extend identity-platform capabilities using REST APIs, JSON, and customizable settings.
• Analyze authentication and authorization logs to diagnose issues, identify root causes, and implement effective solutions.
• Create clear IAM documentation, architecture diagrams, and process flows that support solution design and ongoing operations.
• Identify opportunities to improve authentication controls, processes, and platform capabilities while balancing security, reliability, and user experience.

How this opportunity is different

This role gives you the opportunity to work at the intersection of identity, cybersecurity, technology, and user experience. Your work will directly contribute to protecting Aon's technology environment while enabling secure and reliable access for colleagues and clients.

You will serve as an IAM subject-matter resource and trusted partner, collaborating across teams to solve complex authentication challenges and continually improve identity capabilities.

Skills and experience that will lead to success

• Professional experience designing, implementing, or supporting IAM solutions.
• Experience implementing and integrating SSO and MFA technologies for workforce and/or external user environments, including platforms such as Okta or Microsoft Entra.
• Working knowledge of identity and authentication standards and protocols such as SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, and Kerberos.
• Experience analyzing authentication and authorization logs and troubleshooting complex identity issues.
• Working experience with REST APIs and JSON.
• Familiarity with applicable security and compliance frameworks, such as GDPR, SOX, ISO 27001, and SOC 2.
• Analytical and problem-solving skills with the ability to identify root causes and develop practical solutions.
• Clear written and verbal communication skills, including the ability to explain technical concepts to varied audiences.
• Ability to collaborate across technology and business teams, manage competing priorities, and contribute effectively in a team environment.
• Ability to create clear technical documentation, diagrams, and process flows.
• 3 + years of relevant professional experience designing and implementing IAM solutions, including experience with SSO and MFA technologies.
• Equivalent combinations of relevant experience, skills, and education may also be considered.

Education

Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant industry experience.

For positions in San Francisco and Los Angeles, we will consider for employment qualified applicants with arrest and conviction record in accordance with local Fair Chance ordinances.

Aon is not accepting unsolicited resumes from search firms for this position. If you are a search firm, you will not be compensated in any way for your submission of a candidate, even if Aon hires that candidate.

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities to this job at any time.

Pay Transparency Laws

The salary range for this position (intended for U.S. applicants) is [$92000 to $130000] annually. The actual salary will vary based on applicant’s education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant’s geographic location.

A summary of all the benefits offered for this position

Aon offers a comprehensive package of benefits for full-time and regular part-time colleagues, including, but not limited to: a 401(k) savings plan with employer contributions; an employee stock purchase plan; consideration for long-term incentive awards at Aon’s discretion; medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts, employee and dependent life insurance and supplemental life and AD&D insurance; optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions. Eligibility for benefits is governed by the applicable plan documents and policies.