Senior Identity Engineer - SSO, MFA & IAM Automation

DRW; Chicago (IL); On-site; USD 150,000 - 200,000; Full time

Job summary

DRW in Chicago is seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of enterprise authentication and authorization services. The IAM team will ensure security, compliance, availability, and a good user experience across on‑prem and cloud environments.

The role emphasizes SSO, federation, MFA, and fine‑grained access policies, with cross‑functional collaboration with security, infrastructure, application, and DevOps teams.

Qualifications

• IAM experience with 5+ years.
• Hands-on with Ping AIC/PingFederate.
• Deep knowledge of SSO, federation, and protocols (SAML 2.0, OAuth 2.0, OIDC, JWT).
• Integration with AD/Entra ID and provisioning (SCIM/API).
• MFA and adaptive authentication experience.
• Troubleshoot authentication flows, TLS, and related infrastructure.
• Scripting and IaC/CI-CD familiarity.
• Linux-based operations and runbooks/documentation.

Responsibilities

• Own, implement, and operate end-to-end enterprise authentication and federation solutions; drive architecture reviews and collaborate to influence design decisions.
• Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT-based integrations.
• Integrate identity solutions with enterprise apps, APIs, SaaS platforms, and custom apps, including SSO and provisioning.
• Implement MFA, adaptive authentication, and fine-grained access policies.
• Support identity lifecycle and directory integrations (AD/Entra ID, Azure AD) and provisioning systems.
• Troubleshoot authentication/authorization flows; perform root-cause analysis, incident response, and performance tuning.
• Ensure compliance with security, audit, and regulatory requirements.
• Collaborate with security, infra, application, and DevOps teams; deliver identity services.
• Create and maintain runbooks, SOPs, and technical documentation.

Skills

IAM

SSO & federation

MFA

Python

Shell

Go

PowerShell

Terraform

Ansible

Linux

Tools

Ping Federate

Ping AIC

Azure AD / Entra ID

ADFS

Active Directory

LDAP

SCIM/API integrations

Job description

DRW in Chicago is seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of enterprise authentication and authorization services. The IAM team will ensure security, compliance, availability, and a good user experience across on‑prem and cloud environments.

The role emphasizes SSO, federation, MFA, and fine‑grained access policies, with cross‑functional collaboration with security, infrastructure, application, and DevOps teams.