Senior Identity Engineer

Iceberg; Chicago (IL); Híbrido; USD 110 000 - 170 000; Tempo integral

Resumo da oferta

Iceberg in Chicago is forming a brand-new Identity Engineering team. You will help build, implement and operate authentication and authorization services across on-prem and cloud, working with security, infra and engineering teams. You’ll influence architecture for a new IAM function and focus on SSO, federation, MFA and directory services.

We’re seeking engineers from junior to staff levels with strong identity fundamentals and hands-on engineering ability. Location is Chicago, hybrid.

Qualificações

• Strong identity fundamentals and hands-on engineering ability.
• Experience with authentication, authorization, SSO and federation.
• Experience with Linux, APIs, cloud environments.
• Knowledge of OAuth 2.0, OIDC, SAML, MFA, SCIM and directory services.

Responsabilidades

• Build, implement and operate IAM services across on-prem and cloud.
• Collaborate with security, infrastructure and engineering teams.
• Influence architecture and direction of a new IAM function.
• Work on authentication and authorization, SSO and federation strategies.

Conhecimentos

Auth & IAM

SSO & Federation

OAuth 2.0

OIDC

SAML

MFA

SCIM

AD/Entra ID

LDAP

Ping Identity

Linux

APIs

Python

Go

Java

PowerShell

Terraform

CI/CD

Cloud

Kubernetes

Formação académica

Ferramentas

PingFederate

Active Directory

Entra ID

Terraform

CI/CD tooling

Kubernetes

Descrição da oferta de emprego

I'm working with a world-leading financial services organisation, known across the industry for hiring strong technologists, maintaining a high technical bar and retaining its people through complex and unique technical challenges, alongside strong long-term compensation growth.

They're now building a brand-new Identity Engineering team in Chicago and are open on level, from experienced engineers through to more senior/staff-level hires.

You'll be helping to build, implement and operate the firm's authentication and authorization services, working across SSO, federation, MFA, identity integrations and secure access across both on-prem and cloud environments. You'll work closely with security, infrastructure and engineering teams, integrating identity across applications, APIs and internal platforms, while also helping influence the architecture and direction of a completely new IAM function.

This sits firmly on the engineering side of IAM. We're looking for experience across authentication and authorization, SSO and federation, with technologies and protocols such as OAuth 2.0, OIDC, SAML, MFA, SCIM, Active Directory/Entra ID and LDAP.

Experience with Ping Identity / PingFederate would be particularly valuable, alongside broader engineering skills across Linux, APIs, Python/Go/Java/PowerShell, Terraform, CI/CD, cloud or Kubernetes.

You don't need to tick every box. The important thing is strong identity fundamentals, hands-on engineering ability and an interest in building rather than simply maintaining an established IAM environment.

Location: Chicago, hybrid.