Senior IAM Engineer

Cleartech Recruiting; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

Cleartech Recruiting is seeking a hands-on security engineer focused on IAM in a Microsoft identity environment. You will own and evolve IAM capabilities across a Microsoft ecosystem.

The role emphasizes implementing MFA, Conditional Access, SSO/federation, and access governance while building automation with PowerShell/Python to scale identity operations.

Join a fast-paced team in Chicago, driving Zero Trust alignment and identity maturity across security programs.

Qualifications

• Hands-on IAM engineering experience (implementation + operations).
• Strong experience with Microsoft Entra ID / Azure AD.
• Knowledge of MFA, Conditional Access, SSO/Federation (SAML/OIDC/OAuth).
• Scripting/automation via PowerShell and/or Python.
• IGA / lifecycle automation and PIM/PAM concepts preferred.

Responsibilities

• Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem.
• Design, implement, and operate identity controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance.
• Partner with security leadership and engineering peers to strengthen identity posture and security maturity.
• Build automation/tooling to scale identity operations (PowerShell and/or Python).
• Contribute to security architecture initiatives (Zero Trust concepts).

Skills

IAM engineering

Azure AD

MFA/CA/SSO

Zero Trust concepts

Tools

PowerShell

Python

Azure AD

Job description

A financial services / wealth management organization is growing its security engineering function and is hiring a hands-on IAM-first security engineer. This role is focused on improving identity programs in a Microsoft/Azure environment.

What you’ll do

• Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem
• Design, implement, and operate identity controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance
• Partner with security leadership and engineering peers to strengthen identity posture and security maturity
• Build automation/tooling to scale identity operations (PowerShell and/or Python)
• Contribute to security architecture initiatives (ex: Zero Trust concepts)

Must-haves

• Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC)
• Strong experience with Microsoft Entra ID / Azure AD
• Working knowledge of MFA, Conditional Access, SSO/federation (SAML/OIDC/OAuth), and access controls
• Scripting/automation skills: PowerShell and/or Python
• Comfort working in a fast-paced, high-ownership environment

Nice-to-haves

• Identity governance / IGA (access reviews, joiner-mover-leaver, lifecycle automation)
• Privileged access concepts (PIM/PAM)
• Exposure to Zero Trust approaches and/or tools (Zscaler-type platforms)