Sr. Identity & Access Management Engineer

Aon plc; Chicago (IL); Remote; USD 141,000 - 148,000; Full time

Job summary

Aon plc is seeking a Sr. Identity & Access Management Engineer to design, implement, and govern enterprise IAM solutions from its Chicago HQ with optional telecommuting.

The role focuses on IdentityNow-based identity lifecycle, RBAC governance, and automation to streamline joiner/mover/leaver workflows and access provisioning across on-prem and cloud systems. Ideal candidates hold a Master’s degree and 3+ years in enterprise IAM, API integrations, and SoD/audit processes, with strong

Qualifications

• Architect, design and implement IAM solutions using SailPoint IdentityNow with identity lifecycle and RBAC models.
• Configure IdentityNow components including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events.
• Develop API-driven integrations using REST, SCIM and JSON.
• Automate IAM tasks using PowerShell/Python/Java.
• Implement access certification campaigns, SoD policies, and audit/compliance processes.
• Troubleshoot identity issues including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems.
• Define IAM architecture standards, create technical design documents, and lead IAM modernization and cloud security initiatives.

Responsibilities

• Lead IAM modernization initiatives and ensure alignment with security standards.
• Collaborate with Security, HR, DevOps, and Application teams to ensure consistent identity governance.
• Provide Tier-3 support and monitor system health, identity hygiene, and platform performance.
• Support flexible working arrangements and contribute to a collaborative, inclusive culture.

Skills

SailPoint IdentityNow

RBAC models

Identity lifecycle

APIs REST/SCIM/JSON

Automation (PowerShell/Python/Java)

SoD & audit/compliance

IAM architecture standards

Education

Master’s degree in Computer Science, Information Technology, or related field

Tools

IdentityNow Connectors

IdentityNow Workflows

IdentityNow Transforms

IdentityNow Rules

Access Reviews

Job description

Job Title: Sr. Identity & Access Management Engineer

Aon is in the business of better decisions

At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

As an organization, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

What the day will look like

Aon Service Corporation seeks a Sr. Identity & Access Management Engineer based out of headquarters in Chicago, Illinois to develop enterprise software. Architect, design, and implement enterprise Identity and Access Management solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls. Lead Joiner–Mover–Leaver (JML) automation, provisioning/de-provisioning workflows, and integration with HR, directory, and cloud systems. Configure and customize IdentityNow components including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events. Develop API-driven integrations using REST, SCIM, and JSON. Automate IAM tasks using PowerShell/Python/Java. Implement access certification campaigns, Segregation of Duties (SoD) policies, and audit/compliance processes. Integrate IdentityNow with Active Directory, Azure AD, LDAP, Databases, and Webservices and onboard applications to manage account lifecycle. Troubleshoot identity issues including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems. Define IAM architecture standards, create technical design documents, and lead IAM modernization and cloud security initiatives. Collaborate with Security, HR, DevOps, and Application teams to ensure consistent identity governance across the enterprise. Provide Tier-3 support, perform system health monitoring, maintain identity hygiene, and optimize overall IAM platform performance. May telecommute from anywhere in the United States 5 days a week. Annual Salary: $141,398 - $148,300.

Job Location: 200 E. Randolph Street, Chicago, IL 60601

Skills and experience that will lead to success

Requires a Master’s degree in Computer Science, Information Technology, or a related field plus three years of enterprise software development experience. Must have at least three years of experience in each of the following:

1. Architecting, designing, and implementing enterprise Identity and Access Management solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls
2. Configuring and customizing IdentityNow components including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events
3. Developing API-driven integrations using REST, SCIM, and JSON
4. Automating IAM tasks using PowerShell/Python/Java
5. Implementing access certification campaigns, Segregation of Duties (SoD) policies, and audit/compliance processes
6. Troubleshooting identity issues including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems
7. Defining IAM architecture standards, creating technical design documents, and leading IAM modernization and cloud security initiatives

How we support our colleagues

In addition to our comprehensive benefits package, we encourage a diverse workforce. Plus, our agile, inclusive environment allows you to manage your wellbeing and work/life balance, ensuring you can be your best self at Aon. Furthermore, all colleagues enjoy two “Global Wellbeing Days” each year, encouraging you to take time to focus on yourself. We offer a variety of working style solutions, but we also recognize that flexibility goes beyond just the place of work... and we are all for it. We call this Smart Working!

Our continuous learning culture inspires and equips you to learn, share and grow, helping you achieve your fullest potential. As a result, at Aon, you are more connected, more relevant, and more valued.

Aon values an innovative, diverse workplace where all colleagues feel empowered to be their authentic selves.

Aon is proud to be an equal opportunity workplace.

Aon provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, age, disability, veteran, marital, domestic partner status, or other legally protected status. Aon is committed to a diverse workforce and is an affirmative action employer. People with criminal histories are encouraged to apply.

We provide individuals with disabilities reasonable accommodations to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment in accordance with applicable law. Please contact us to request an accommodation on [e-mail]

Salary range or hourly pay range for the position

Thesalary range for this position is $141,398 - $148,300 annually.

A summary of all the benefits offered for that position

• a 401(k) savings plan with employer contributions
• an employee stock purchase plan
• consideration for long-term incentive awards at Aon’s discretion
• medical, dental and vision insurance, various types of leaves of absence, paid time off, including 12 paid holidays throughout the calendar year, 15 days of paid vacation per year, paid sick leave as provided under state and local paid sick leave laws, short-term disability and optional long-term disability, health savings account, health care and dependent care reimbursement accounts,employee and dependent life insurance and supplemental life and AD&D insurance
• optional personal insurance policies, adoption assistance, tuition assistance, commuter benefits, and an employee assistance program that includes free counseling sessions.

Eligibility for benefits is governed by the applicable plan documents and policies.