Senior Identity Engineer - SSO, MFA & IAM Automation

Tradermath; Chicago (IL); Hybrid; USD 150,000 - 200,000; Full time

Job summary

DRW in Chicago seeks an experienced Identity Engineer to own the delivery and operation of enterprise authentication services across on‑prem and cloud environments. You will drive SSO, federation, MFA, and secure access management while ensuring security, availability, and regulatory compliance.

Collaborate with security, infrastructure, and DevOps teams to implement integrations, lifecycle management, and provisioning.

Qualifications

• Strong written and verbal communication, stakeholder management, and cross-team collaboration.
• Five or more years of IAM experience or equivalent hands-on experience.
• Hands-on experience implementing and operating commercial identity platforms and enterprise identity services (Ping AIC / PingFederate preferred).
• Deep knowledge of SSO, federation, and authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect, JWT).
• Experience integrating with directory and lifecycle systems (AD/LDAP, Azure AD/Entra ID, ADFS) and provisioning via SCIM or APIs.
• Practical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement.
• Strong troubleshooting across authentication flows, certificates, TLS, networking, and related infra.
• Scripting/automation with Shell, Python, Go, or PowerShell; IaC/CI/CD tools like Terraform or Ansible.
• Comfort in Linux and producing runbooks and technical docs.

Responsibilities

• Own, implement, and operate end-to-end authentication and federation solutions with focus on security, compliance, and availability.
• Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, and JWT integrations.
• Integrate identity solutions with enterprise and third-party apps, APIs, SaaS, and custom web/mobile apps including SSO and provisioning.
• Implement MFA, adaptive authentication, and fine-grained access policies.
• Support identity lifecycle and directory integrations with Entra ID/Azure AD, Active Directory, and ADFS, plus provisioning.
• Troubleshoot authentication flows; perform root-cause analysis, incident response, and performance tuning.
• Ensure compliance with security, audit, and regulatory requirements and support assessments.
• Collaborate with security, infrastructure, application, and DevOps teams to deliver identity services.
• Create and maintain runbooks, SOPs, operational procedures, and technical documentation.

Skills

IAM experience

SSO

OAuth 2.0

OIDC

JWT

Active Directory/LDAP

Azure AD/Entra ID

Shell

Python

Go

PowerShell

Terraform/Ansible

Tools

PingAIC

PingFederate

Job description

DRW in Chicago seeks an experienced Identity Engineer to own the delivery and operation of enterprise authentication services across on‑prem and cloud environments. You will drive SSO, federation, MFA, and secure access management while ensuring security, availability, and regulatory compliance.

Collaborate with security, infrastructure, and DevOps teams to implement integrations, lifecycle management, and provisioning.