Senior Identity Engineer — SSO, MFA & Cloud IAM

P2P; Chicago (IL); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Group medical insurance

Dental insurance

Vision insurance

401k with discretionary match

Short and long-term disability

Life and AD&D insurance

Health savings accounts

Flexible spending accounts

Job summary

DRW, a leading trading firm based in Chicago, seeks an experienced Identity Engineer to own the delivery, operation, and continuous improvement of enterprise authentication and authorization services. You will focus on SSO, federation, MFA, and secure access management across on-prem and cloud environments.

The IAM team collaborates with security, infrastructure, application, and DevOps groups to meet SLAs and control requirements, delivering robust identity solutions and extensive documentation.

Qualifications

• 5+ years in IAM or equivalent hands-on experience.
• Experience implementing and operating Ping Identity platforms (PingFederate/PingAIC) or equivalent.
• Strong knowledge of SSO, federation, and protocols (SAML 2.0, OAuth 2.0, OpenID Connect).
• Experience with directory and lifecycle systems (Active Directory/LDAP, Azure AD/Entra ID, ADFS) and provisioning (SCIM/API).
• Practical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement.
• Scripting/automation and IaC/CI-CD tooling (Shell, Python, Terraform, Ansible).
• Comfortable in Linux and producing runbooks and documentation.

Responsibilities

• Own, implement, and operate end-to-end enterprise authentication and federation solutions; drive architecture reviews and influence design decisions.
• Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT-based integrations.
• Integrate identity solutions with enterprise apps, APIs, and SaaS platforms, including SSO, provisioning, and secure API authentication.
• Implement MFA, adaptive authentication, and fine-grained authorization policies.
• Support identity lifecycle and directory integrations with IAM services and provisioning systems.
• Troubleshoot authentication/authorization flows; perform root-cause analysis and incident response.
• Ensure compliance with security/audit requirements and support assessments.
• Collaborate with security, infra, app, and DevOps teams to operate identity services.
• Create and maintain runbooks, SOPs, and technical documentation.

Skills

IAM expertise

SSO & federation

SAML 2.0 / OAuth 2.0 / OIDC

Active Directory/Azure AD/Entra ID

Scripting: Shell/Python

Tools

PingFederate

Ping AIC

Terraform

Ansible

Job description

DRW, a leading trading firm based in Chicago, seeks an experienced Identity Engineer to own the delivery, operation, and continuous improvement of enterprise authentication and authorization services. You will focus on SSO, federation, MFA, and secure access management across on-prem and cloud environments.

The IAM team collaborates with security, infrastructure, application, and DevOps groups to meet SLAs and control requirements, delivering robust identity solutions and extensive documentation.