Senior IAM Engineer — SSO, MFA & Cloud Identity

DRW Holdings, LLC.; Chicago (IL); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Group medical insurance

Dental and vision insurance

401k with discretionary employer match

Short and long-term disability

Life and AD&D insurance

Health savings accounts

Flexible spending accounts

Job summary

DRW, a Chicago-based diversified trading firm, is seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of our enterprise authentication and authorization services. The IAM team will focus on SSO, federation, MFA, and secure access management across on-prem and cloud environments, collaborating with security, infrastructure, application, and DevOps teams.

You will implement and operate SAML, OAuth, OIDC, LDAP integrations, maintain runbooks, and

Qualifications

• 5+ years of IAM experience or equivalent hands-on work.
• Experience with commercial identity platforms (Ping Identity products) and enterprise IAM services.
• Deep knowledge of SSO, federation, and authentication protocols (SAML 2.0, OAuth 2.0, OIDC, JWT).
• Experience with directory and lifecycle systems (AD/LDAP, Azure AD/Entra ID, ADFS) and provisioning (SCIM/API).
• Experience with MFA, adaptive authentication, and access policy enforcement.
• Strong troubleshooting across authentication flows, certificates, TLS, networking, and related infra.
• Scripting/automation skills and familiarity with IaC/CI-CD tools; Linux proficiency.

Responsibilities

• Own, implement, and operate end-to-end enterprise authentication and federation solutions.
• Drive architecture reviews and influence design decisions for security and availability.
• Configure and support SAML 2.0, OAuth 2.0, OIDC, LDAP, and JWT-based integrations.
• Integrate identity with APIs, SaaS platforms, and custom apps including SSO and provisioning.
• Implement MFA and fine-grained authorization policies.
• Collaborate with security, infrastructure, and DevOps teams to run identity services.
• Create runbooks and technical documentation.
• Troubleshoot and perform root-cause analysis of auth issues.

Skills

IAM expertise

SSO & federation

SAML/OIDC/OAuth

MFA/adaptive authentication

Directory integration

Scripting/automation

IaC/CI-CD

Linux administration

Tools

Ping Federate

Ping Directory

Azure AD Entra ID

ADFS

Terraform

Ansible

Docker

Kubernetes

Prometheus

ELK / Splunk

Job description

DRW, a Chicago-based diversified trading firm, is seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of our enterprise authentication and authorization services. The IAM team will focus on SSO, federation, MFA, and secure access management across on-prem and cloud environments, collaborating with security, infrastructure, application, and DevOps teams.

You will implement and operate SAML, OAuth, OIDC, LDAP integrations, maintain runbooks, and