Senior IAM Engineer: Directory Services & Automation

ICE; Jacksonville (FL); On-site; USD 130,000 - 170,000; Full time

Job summary

Intercontinental Exchange, Inc. (ICE) seeks an Identity and Access Management professional to design, implement, and maintain identity controls across IT platforms.

You will manage ForgeRock/OpenIDM and OpenDS, monitor system health, and drive automation through scripting and CI/CD pipelines. Ideal candidates have 5+ years in IAM, strong Linux administration skills, and a solid understanding of LDAP-based architectures, MFA, and modern identity protocols.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or an equivalent combination of education, training, or work experience
• 5+ years of experience in Identity & Access Management or directory services engineering
• Hands‑on experience with ForgeRock OpenIDM and/or OpenDS (or Ping Identity directory products)
• Strong Linux administration skills (RHEL preferred)
• Proficiency in scripting languages such as Bash and/or Python for automation and operational tooling
• Solid understanding of LDAP concepts: schema, replication, ACIs, indexing, and directory architecture
• Experience supporting enterprise IAM in a production environment
• Experience designing, implementing, or supporting multi‑factor authentication (MFA) solutions
• Familiarity with authentication protocols: LDAP, Kerberos, SAML, OAuth2/OIDC
• Strong troubleshooting and root cause analysis skills
• Requires extensive knowledge of relevant IT system issues, techniques, and implications across all existing server platforms
• Must have extensive knowledge in networking, databases, systems, and/or Web operations.

Responsibilities

• Application & Infrastructure Maintenance
• Administer, maintain, and support ForgeRock/OpenIDM and OpenDS directory services in production and non-production environments
• Monitor system health, performance, and availability; perform proactive tuning and capacity planning
• Manage directory replication, schema extensions, indexing, and access control policies
• Perform upgrades, patching, and configuration changes in accordance with change management processes
• Troubleshoot and resolve complex issues related to directory services, authentication, and identity workflows
• Maintain high availability and disaster recovery configurations for IAM infrastructure
• Linux Administration
• Manage and maintain Linux-based servers hosting IAM applications and directory services
• Perform OS-level troubleshooting, log analysis, and performance diagnostics
• Implement and maintain system hardening standards and security configurations
• Coordinate with infrastructure teams on server provisioning, networking, and storage
• Scripting & Automation
• Develop and maintain scripts to automate routine operational tasks, monitoring, and reporting (Bash, Python, or similar)
• Automate provisioning, de-provisioning, and reconciliation workflows
• Build tooling to support bulk directory operations, data migrations, and schema management
• Maintain and improve CI/CD pipelines related to IAM configuration and deployments
• AI Adoption & Enablement
• Stay current with emerging AI tools and capabilities relevant to IAM operations, security, and automation
• Identify and champion opportunities to incorporate AI-assisted tooling into day-to-day workflows, such as anomaly detection, access pattern analysis, and automated remediation
• Use AI coding and scripting assistants responsibly to accelerate development of automation and operational tooling
• Contribute to team best practices and guardrails around responsible AI usage in an identity and security context
• Partner with security, application, and infrastructure teams to integrate identity services with enterprise applications
• Produce and maintain technical documentation including runbooks, architecture diagrams, and standard operating procedures
• Participate in on-call rotation and provide escalation support for P1/P2 incidents
• Mentor junior team members and contribute to team knowledge sharing
• Works independently on many IT projects as a project team member, more frequently as a project leader.
• Often provides strategic direction, guidance, and integration of services.
• Communicate verbally and in writing to technical and non-technical audiences of various levels both internally and externally
• Develop partnership-oriented relationships with business executives and functional leaders, especially as it relates to operations and technology
• Multitask in a fast-paced environment with a focus on timeliness, documentation, and communications with peers and business users
• Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness

Skills

IAM

Directory services

Linux admin

Bash/Python scripting

MFA authentication

LDAP / Kerberos / SAML

OIDC / OAuth2

Problem solving

Networking basics

Education

Bachelor’s degree in Computer Science / Information Systems

Tools

ForgeRock OpenIDM

OpenDS

Ping Identity

Docker

Kubernetes

HashiCorp Vault

Job description

Intercontinental Exchange, Inc. (ICE) seeks an Identity and Access Management professional to design, implement, and maintain identity controls across IT platforms.

You will manage ForgeRock/OpenIDM and OpenDS, monitor system health, and drive automation through scripting and CI/CD pipelines. Ideal candidates have 5+ years in IAM, strong Linux administration skills, and a solid understanding of LDAP-based architectures, MFA, and modern identity protocols.