Senior Systems Engineer - IAM

Insight Global; Urbandale (IA); On-site; USD 107,000 - 198,000; Full time

Job summary

W. R. Berkley seeks a Senior Systems Engineer to lead IAM design and implementation across the enterprise. You will design authentication workflows, govern access, and partner with teams to onboard applications into Auth0/Okta, driving best practices and Zero Trust initiatives.

You will collaborate with architects and security partners, mentor junior engineers, and participate in agile sprint planning while advancing AI governance and certificate automation efforts.

Qualifications

• 5+ years of Identity & Access Management (IAM) design and engineering experience.
• 3+ years of experience with Auth0, Okta, Microsoft Entra ID, or similar enterprise identity platforms.
• Strong hands-on experience implementing and supporting Auth0 or Okta.
• Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC).
• Strong understanding of authentication vs. authorization concepts.
• Ability to explain and implement Access Tokens, ID Tokens, JWTs, and modern identity architectures.
• Experience with SAML, Federation, and Single Sign-On (SSO).
• Experience creating enterprise IAM standards, workflows, and governance models.
• Experience onboarding applications into enterprise identity platforms.
• Understanding of Zero Trust security principles.
• Experience working within Agile or SAFe environments.
• Strong communication skills and ability to work directly with technical and business stakeholders.
• Ability to independently own projects from design through implementation.
• Experience with Auth0 Fine-Grained Authorization (FGA).
• Microsoft Entra ID and Active Directory experience.
• IAM automation experience using scripting, GitHub, GitLab, or Infrastructure as Code
• Identity Governance, lifecycle management, or ServiceNow integration experience.
• Exposure to PKI, certificate management, or Zero Trust initiatives.
• Experience supporting AI identity governance or emerging identity security technologies.

Responsibilities

• Design and implement authentication and authorization solutions using Auth0, Okta, Entra ID, and related IAM technologies.
• Partner with application teams to onboard and integrate applications into Auth0.
• Develop reusable identity patterns, workflows, and standards across the enterprise.
• Lead discussions around authentication, authorization, federation, and identity governance best practices.
• Support implementation of Auth0 Fine-Grained Authorization (FGA) capabilities.
• Establish governance standards and identity controls for AI agents and emerging AI technologies.
• Collaborate with architects, infrastructure teams, developers, and security partners on enterprise identity initiatives.
• Create, manage, and deliver sprint commitments within a scaled Agile environment.
• Develop automation solutions utilizing scripting, GitHub, GitLab, and infrastructure-as-code principles.
• Improve Active Directory lifecycle management and service account governance.
• Support certificate automation and modernization efforts related to PKI and post-quantum readiness.
• Assist with ServiceNow integrations and identity-related workflow automation.
• Provide guidance and mentorship to junior engineers and offshore support resources.
• Participate in a rotating on-call schedule supporting enterprise identity platforms.
• Drive continuous improvement initiatives focused on security, automation, and operational efficiency.

Skills

IAM design

Auth0

Okta

Entra ID

OAuth 2.0

OIDC

SAML

Zero Trust

Agile/SAFe

Communication

Project ownership

IaC

ServiceNow

AI governance

Tools

Auth0

Okta

Entra ID

Job description

Job Description

W. R. Berkley is seeking a Senior Systems Engineer to join its enterprise Identity & Access Management team. This individual will serve as a senior technical leader responsible for designing, implementing, and governing authentication and authorization solutions across the organization.

This is a highly visible, project-focused role supporting over 60 business units and customer-facing applications. The ideal candidate will bring deep expertise in Auth0, Okta, OAuth, and OpenID Connect, with the ability to design identity workflows, establish security standards, and serve as an internal consultant on IAM best practices.

The team is focused on modern identity initiatives including fine-grained authorization, AI identity governance, Active Directory modernization, certificate lifecycle automation, and Zero Trust security strategies.

Day-to-Day ResponsibilitiesDesign and implement authentication and authorization solutions using Auth0, Okta, Entra ID, and related IAM technologiesPartner with application teams to onboard and integrate applications into Auth0Develop reusable identity patterns, workflows, and standards across the enterpriseLead discussions around authentication, authorization, federation, and identity governance best practicesSupport implementation of Auth0 Fine-Grained Authorization (FGA) capabilitiesEstablish governance standards and identity controls for AI agents and emerging AI technologiesCollaborate with architects, infrastructure teams, developers, and security partners on enterprise identity initiativesCreate, manage, and deliver sprint commitments within a scaled Agile environmentDevelop automation solutions utilizing scripting, GitHub, GitLab, and infrastructure-as-code principlesImprove Active Directory lifecycle management and service account governanceSupport certificate automation and modernization efforts related to PKI and post-quantum readinessAssist with ServiceNow integrations and identity-related workflow automationProvide guidance and mentorship to junior engineers and offshore support resourcesParticipate in a rotating on-call schedule supporting enterprise identity platformsDrive continuous improvement initiatives focused on security, automation, and operational efficiency

The compensation for this position will be $107,000 - $198,000 based on years of experience.

Skills and Requirements

• 5+ years of Identity & Access Management (IAM) design and engineering experience
• 3+ years of experience with Auth0, Okta, Microsoft Entra ID, or similar enterprise identity platforms
• Strong hands-on experience implementing and supporting Auth0 or Okta
• Deep knowledge of OAuth 2.0 and OpenID Connect (OIDC)
• Strong understanding of authentication vs. authorization concepts
• Ability to explain and implement Access Tokens, ID Tokens, JWTs, and modern identity architectures
• Experience with SAML, Federation, and Single Sign-On (SSO)
• Experience creating enterprise IAM standards, workflows, and governance models
• Experience onboarding applications into enterprise identity platforms
• Understanding of Zero Trust security principles
• Experience working within Agile or SAFe environments
• Strong communication skills and ability to work directly with technical and business stakeholders
• Ability to independently own projects from design through implementation
• Experience with Auth0 Fine-Grained Authorization (FGA)
• Microsoft Entra ID and Active Directory experience
• IAM automation experience using scripting, GitHub, GitLab, or Infrastructure as Code
• Identity Governance, lifecycle management, or ServiceNow integration experience
• Exposure to PKI, certificate management, or Zero Trust initiatives
• Experience supporting AI identity governance or emerging identity security technologies

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].