Senior Systems Engineer - IAM

W. R. Berkley Corporation; Wilmington (DE); On-site; USD 107,000 - 198,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Wellness program

Paid time off

401(k) and Profit-Sharing

Job summary

W. R. Berkley Corporation's Berkley Technology Services is seeking aSr Systems Engineer specialized in IAM. You will lead planning, architecture, and deployments with Okta, Auth0, and EntraID, driving secure identity verification and access control across environments.

You will mentor staff, collaborate with vendors and PMs, and develop governance and policy frameworks to ensure compliance and operational excellence in a hybrid, multi-cloud setting.

Qualifications

• IAM design, administration, and support for a minimum of 5 years.
• Experience with Okta, Auth0, and Microsoft Entra ID for a minimum of 3 years.
• Ability to design IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication.
• Strong understanding of SSO, SAML, OAuth/OIDC, MFA, RBAC, and fine-grained authorization.
• Experience in API management and protecting customer and workforce data, services, and applications.
• Proficiency in JavaScript (Node.js preferred) and web security fundamentals.
• Familiarity with CI/CD pipelines and tools such as Ansible, GitHub, Terraform, and Jenkins.
• Hybrid multi-cloud experience with Azure and AWS.
• Ability to work irregular hours and be on-call.

Responsibilities

• Actively participate in planning and implementation of IAM systems and related hardware/software.
• Perform system-level scripting to manage applications and technologies.
• Lead IAM deployment projects ensuring security standards compliance.
• Build and scale API management solutions protecting data and services.
• Develop and enforce policies for system provisioning and maintenance.
• Mentor and cross-train staff in IAM technologies and best practices.
• Collaborate with PMs and technical teams to present design and deployment strategies.
• Maintain documentation of problems and resolutions and platform configurations.
• Participate in ITIL processes for incidents, requests, and changes.

Skills

IAM design

Okta

Auth0

EntraID

SSO

SAML

OAuth/OIDC

MFA

RBAC

Zero Trust

Education

Bachelor's Degree in Computer Science/IT/IS

Tools

CI/CD (Ansible)

GitHub

Terraform

Jenkins

Job description

Company Details

Company URL: https://www.berkleytechnologyservices.com/

Berkley Technology Services (BTS) is a dynamic company committed to providing world class IT services. We offer a unique culture, enabling our team members to be at the forefront of technology while delivering high quality solutions. We are looking for outstanding individuals who will bring unique perspectives, insight, and innovation to our teams. BTS, a member company of W. R. Berkley Corporation, has facilities in Des Moines, Iowa and Wilmington, Delaware.

Our functions include working with various third parties to develop, integrate, and support insurance systems of WRBC's operating units. BTS strives to provide these functions in a holistic manner including helpdesk support, system connectivity, and operational support. Additional responsibilities include coordinating communications regarding best practices for our supported systems and researching innovative technologies. At BTS, there are opportunities associated with being a part of an established and empowering corporation while maintaining a positive personal working environment. Additionally, we provide a competitive compensation and benefits package including a casual dress code. BTS is constantly growing and expanding to meet the changing demands of one of the most successful insurance organizations in the world. Visit us at berkley-bts.com to learn more information.

The Company is an equal employment opportunity employer.

Responsibilities

We are seeking a dynamic Sr Systems Engineer with a strong background in Identity and Access Management (IAM) technologies, including Okta, Auth0, and Microsoft EntraID. The ideal candidate will actively engage in the planning, architecture, and execution of IAM systems, serving as a pivotal liaison between the organization and key vendors. This role demands a proactive approach to problem resolution, the ability to lead projects, and a commitment to mentoring technical staff. Collaboration with project managers and technical teams to deliver customer-centric solutions, including the presentation of design and deployment strategies, is essential. This role requires a proactive stance on system provisioning, maintenance, security, and compliance, ensuring alignment with company goals and regulatory standards. Key to the role is the development of policies and procedures that support system integrity, security, and availability, with a focus on identity verification and access control. Strong analytical skills, excellent communication abilities, and professional experience are crucial for success in this position.

• Systems Planning and Implementation: Actively participate in the planning and implementation of IAM systems, infrastructure, and related hardware and software in response to customer requests and organizational requirements.
• Programming/Scripting: Perform system-level programming/scripting to facilitate the management of supported applications and technologies, including Okta Expression Language (EL) and PowerShell.
• System Management: Conduct configuration, integration, maintenance, performance management, security management, failure analysis and recovery, and user support.
• IAM Technology Deployment: Lead IAM technology deployment projects, such as Okta, Auth0, and Microsoft Entra ID, ensuring deployments fulfill user needs and comply with security standards.
• API Management: Build, analyze, operate, and scale API management solutions to protect customer and workforce data, services, and applications.
• Security Standards: Emphasize security standards and user needs fulfillment in the deployment of IAM solutions, including MFA, RBAC, fine-grained authorization, passwordless authentication, and B2B/B2C scenarios.
• Emerging Technologies: Research emerging IAM technologies, including new products, services, protocols, and standards to inform procurement and development strategies.
• Governance, Risk, and Compliance (GRC): Develop and implement GRC strategies to ensure IAM solutions comply with regulatory requirements and industry standards. Conduct risk assessments and audits to identify and mitigate potential security risks.
• Vendor Liaison: Serve as a liaison to vendors (e.g., Okta, Auth0, Microsoft) to facilitate problem resolution.
• Project Leadership: Lead projects, working directly with Project Management, Account Management, and Customer teams.
• Mentorship: Mentor and cross-train technical staff, peers, and subordinate team members in IAM technologies and best practices.
• Development Standards: Provide guidance on development standards and quality expectations.
• Collaboration: Collaborate with technical staff, including project managers, to deliver customer-centric solutions, including presenting design and deployment strategies.
• Policy Development: Develop and oversee the implementation of policies and procedures to ensure system provisioning and maintenance is consistent with company goals, industry best practices, and regulatory requirements.
• Account Management: Manage end-user accounts, permissions, and access rights in accordance with best practices regarding privacy, security, and regulatory compliance.
• ITIL Standards: Participate and adhere to defined ITIL standards for incident, request, and change management.
• Documentation: Document problems and resolutions for future reference, as well as platform configurations and standards.
• Communication: Maintain excellent communication skills, particularly across functional technical areas.
• On Call Rotation (PIC) is required

Qualifications

• IAM design, administration, and support for a minimum of 5 years.
• Experience with Okta, Auth0, and Microsoft Entra ID for a minimum of 3 years.
• Ability to design IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication.
• Strong understanding of SSO, SAML, OAuth/OIDC, adaptive authentication, MFA, RBAC, and fine-grained authorization.
• Experience in API management and protecting customer and workforce data, services, and applications.
• Proficiency in JavaScript (Node.js preferred): Strong understanding of web security fundamentals to mentor application teams, extend IAM workflows, and automate tasks.
• Strong knowledge of security frameworks: Familiar with OWASP, NIST, and other industry-standard security principles.
• IAM Solution Design: Ability to design IAM solutions aligned with Zero Trust and Identity governance
• Proficiency in scripting with Okta Expression Language (EL) and PowerShell.
• Knowledge of GRC strategies and experience in conducting risk assessments and audits.
• Familiarity with CI/CD pipelines and tools such as Ansible, GitHub, Terraform, and Jenkins.
• Experience working in a hybrid multi-cloud environment with Azure and AWS.
• Must be able to work irregular hours as needed and participate in the on-call rotation to meet business needs
• Ability to sit at a desk and work on a computer for extended periods of time
• May occasionally lift and/or move up to 10 pounds
• Vision abilities required by this job include close vision and ability to adjust focus
• Bachelors Degree in Computer Science, Information Technology, Information Systems, or a related discipline. Equivalent experience and/or alternative qualifications will be considered.
• Relevant certifications such as Okta Certified Professional, CISSP, and Microsoft Certified: Identity and Access Administrator Associate (SC-300) highly preferred

Additional Company Details

The company offers a competitive compensation plan and robust benefits package for full time regular employees which for this role include:

• Base Salary Range: $107,000-$198,000
• Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k) and Profit-Sharing plans.

Sponsorship Details

Sponsorship not Offered for this Role