Senior Systems Engineer - IAM

Berkley Technology Services; United States; On-site; USD 110,000 - 190,000; Full time

Benefits offered by this job

Base salary range: $107,000–$198,000

Comprehensive benefits package

Job summary

Berkley Technology Services seeks an IAM leader to plan and implement IAM systems across our environment, focusing on security, automation, and governance. You will drive deployment projects with Okta, Auth0, and Entra ID, build scalable API management, and mentor teams in IAM best practices.

The role requires strong scripting (PowerShell/JavaScript), knowledge of Zero Trust, and experience in a hybrid multi-cloud setup with Azure and AWS. On-call rotation is required.

Qualifications

• IAM design, administration, and support for a minimum of 5 years.
• Experience with Okta, Auth0, and Microsoft Entra ID for a minimum of 3 years.
• Ability to design IAM solutions aligned with Zero Trust and identity governance.
• Strong knowledge of SSO, SAML, OAuth/OIDC, MFA, RBAC, and fine-grained authorization.
• Experience in API management and protecting customer and workforce data, services, and applications.

Responsibilities

• Actively participate in planning and implementing IAM systems and related hardware/software.
• Lead IAM technology deployment projects (Okta, Auth0, Entra ID) ensuring security compliance.
• Build, operate, and scale API management solutions to protect data and services.
• Develop and implement GRC strategies to ensure regulatory compliance.
• Mentor and collaborate with cross-functional teams on IAM best practices.

Skills

IAM design & administration

JavaScript (Node.js)

Web security fundamentals

PowerShell

Zero Trust / identity governance

RBAC / MFA / SSO / SAML

Education

BachelorA00Degree in CS/IT/IS or related

Tools

Okta

Auth0

Microsoft Entra ID

Azure

AWS

Ansible

GitHub

Terraform

Jenkins

PowerShell

Job description

Company Details

Company URL: https://www.berkleytechnologyservices.com/

Berkley Technology Services (BTS) is a dynamic company committed to providing world‑class IT services. We offer a unique culture, enabling our team members to be at the forefront of technology while delivering high‑quality solutions. Find out more at https://www.berkleytechnologyservices.com/. BTS, a member company of W. R. Berkley Corporation, has facilities in Des Moines, Iowa and Wilmington, Delaware. Our functions include working with various third parties to develop, integrate, and support insurance systems of WRBC's operating units. BTS strives to provide these functions in a holistic manner including helpdesk support, system connectivity, and operational support. Additional responsibilities include coordinating communications regarding best practices for our supported systems and researching innovative technologies. At BTS, there are opportunities associated with being a part of an established and empowering corporation while maintaining a positive personal working environment. Additionally, we provide a competitive compensation and benefits package including a casual dress code. BTS is constantly growing and expanding to meet the changing demands of one of the most successful insurance organizations in the world.

The Company is an equal employment opportunity employer.

Responsibilities

• Actively participate in the planning and implementation of IAM systems, infrastructure, and related hardware and software in response to customer requests and organizational requirements.
• Perform system‑level programming/scripting to facilitate the management of supported applications and technologies, including Okta Expression Language (EL) and PowerShell.
• Conduct configuration, integration, maintenance, performance management, security management, failure analysis and recovery, and user support.
• Lead IAM technology deployment projects, such as Okta, Auth0, and Microsoft Entra ID, ensuring deployments fulfill user needs and comply with security standards.
• Build, analyze, operate, and scale API management solutions to protect customer and workforce data, services, and applications.
• Emphasize security standards and user needs fulfillment in the deployment of IAM solutions, including MFA, RBAC, fine‑grained authorization, passwordless authentication, and B2B/B2C scenarios.
• Research emerging IAM technologies, including new products, services, protocols, and standards to inform procurement and development strategies.
• Develop and implement GRC strategies to ensure IAM solutions comply with regulatory requirements and industry standards. Conduct risk assessments and audits to identify and mitigate potential security risks.
• Serve as a liaison to vendors (e.g., Okta, Auth0, Microsoft) to facilitate problem resolution.
• Lead projects, working directly with Project Management, Account Management, and Customer teams.
• Mentor and cross‑train technical staff, peers, and subordinate team members in IAM technologies and best practices.
• Provide guidance on development standards and quality expectations.
• Collaborate with technical staff, including project managers, to deliver customer‑centric solutions, including presenting design and deployment strategies.
• Develop and oversee the implementation of policies and procedures to ensure system provisioning and maintenance is consistent with company goals, industry best practices, and regulatory requirements.
• Manage end‑user accounts, permissions, and access rights in accordance with best practices regarding privacy, security, and regulatory compliance.
• Participate and adhere to defined ITIL standards for incident, request, and change management.
• Document problems and resolutions for future reference, as well as platform configurations and standards.
• Maintain excellent communication skills, particularly across functional technical areas.
• On‑call rotation (PIC) is required.

Qualifications

• IAM design, administration, and support for a minimum of 5 years.
• Experience with Okta, Auth0, and Microsoft Entra ID for a minimum of 3 years.
• Ability to design IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication.
• Strong understanding of SSO, SAML, OAuth/OIDC, adaptive authentication, MFA, RBAC, and fine‑grained authorization.
• Experience in API management and protecting customer and workforce data, services, and applications.
• Proficiency in JavaScript (Node.js preferred) and strong understanding of web security fundamentals to mentor application teams, extend IAM workflows, and automate tasks.
• Strong knowledge of security frameworks: familiarity with OWASP, NIST, and other industry‑standard security principles.
• Ability to design IAM solutions aligned with Zero Trust and identity governance.
• Proficiency in scripting with Okta Expression Language (EL) and PowerShell.
• Knowledge of GRC strategies and experience in conducting risk assessments and audits.
• Familiarity with CI/CD pipelines and tools such as Ansible, GitHub, Terraform, and Jenkins.
• Experience working in a hybrid multi‑cloud environment with Azure and AWS.
• Must be able to work irregular hours as needed and participate in the on‑call rotation to meet business needs.
• Ability to sit at a desk and work on a computer for extended periods of time.
• May occasionally lift and/or move up to 10 pounds.
• Vision abilities required by this job include close vision and ability to adjust focus.
• Bachelor’s Degree in Computer Science, Information Technology, Information Systems, or a related discipline. Equivalent experience and/or alternative qualifications will be considered.
• Relevant certifications such as Okta Certified Professional, CISSP, and Microsoft Certified: Identity and Access Administrator Associate (SC‑300) highly preferred.

Additional Company Details

The company offers a competitive compensation plan and robust benefits package for full‑time regular employees, which for this role includes:

• Base Salary Range: $107,000–$198,000
• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit‑Sharing plans.

Sponsorship Details

Sponsorship not Offered for this Role.