Senior / Staff Identity Platform Engineer

Iceberg; Chicago (IL); Hybrid; USD 150,000 - 200,000; Full time

Job summary

Iceberg in Chicago is establishing a new Identity Engineering function. You will own and build authentication and authorization services across cloud and on-premise environments.

Ideal candidates will demonstrate hands-on engineering with OAuth 2.0, OIDC, SAML, JWT, and PKI, delivering scalable identity solutions with automation and security at heart.

Qualifications

• Demonstrated experience engineering identity solutions, not merely managing IAM platforms.
• Experience integrating enterprise identity platforms across cloud and on-prem systems.
• Strong ownership mindset and ability to deliver end-to-end identity projects.

Responsibilities

• Design, build, and operate authentication and authorization services.
• Collaborate to implement OAuth 2.0, OIDC, SAML integrations.
• Automate identity workflows, token management, and authentication flows.
• Improve reliability, scalability and security of identity infrastructure.

Skills

OAuth 2.0

OIDC

SAML

SSO

JWT

PKI

REST APIs

Linux

Cloud infrastructure

CI/CD

Automation

PingFederate

Ping Identity

ForgeRock

Java

Python

Go

PowerShell

Tools

PingFederate

Ping Identity

ForgeRock

Java

Python

Go

PowerShell

Job description

I'm partnering with a leading global financial services organisation to help build a brand new Identity Engineering function in Chicago.

This is a highly technical environment with complex engineering challenges, where individuals are expected to take real ownership rather than rely on large teams of specialists to deliver solutions.

I'm interested in engineers who have worked in lean, high performing teams, where they've been the go-to person for identity engineering. Whilst candidates from large investment banks, healthcare providers and other enterprise environments will absolutely be considered, we'll be prioritising those who can demonstrate genuine technical ownership, autonomy and the ability to design, build and deliver complex identity solutions themselves.

The opportunity is to join at the beginning, help establish the technical foundations and influence how authentication and authorisation services are designed, built and operated.

What will you be engineering?

• Building and operating enterprise authentication, SSO and federation services across cloud and on-premise infrastructure.
• Engineering secure OAuth 2.0, OIDC, SAML and JWT-based integrations across applications, APIs and internal platforms.
• Developing and automating identity services, access policies, token management and authentication workflows.
• Improving the reliability, scalability and security of identity infrastructure.
• Helping shape the team's future direction, including machine identity, modern authorisation and emerging identity technologies.

What am I looking for?

Someone who has genuinely engineered identity solutions, rather than simply administered IAM platforms.

I'd be interested in engineers with experience across:

• PingFederate, Ping Identity or ForgeRock - highly desirable, but not essential.
• OAuth 2.0, OIDC, SAML, SSO and federation - strong practical knowledge.
• Java, Python, Go or PowerShell - hands-on engineering and automation.
• REST APIs, JWT, certificates, PKI and secure authentication flows.
• Linux, cloud infrastructure, CI/CD and infrastructure automation.

You don't need experience across every technology listed above, and we're open to different levels of seniority.

The important thing is that you've taken ownership of complex identity engineering challenges, can work independently and enjoy building solutions rather than simply maintaining existing systems.

Location: Chicago, hybrid.

$150,000–$200,000 base + bonus – the TC will be high

If you're an engineer who enjoys solving complex identity problems and wants to help build a new function from the ground up, I'd love to speak with you.