Sr.Security Engineer-Identity Security

Federal Home Loan Bank of Chicago; Chicago (IL); On-site; USD 90,400 - 150,700; Full time

Job summary

The Federal Home Loan Bank of Chicago is seeking a Senior Security Engineer to strengthen our security posture across on‑premises and cloud environments. You will design and implement identity controls, manage privileged access, and lead IAM initiatives while mentoring junior staff.

You will collaborate with IT teams to deliver secure solutions, support off-hours changes, and help evolve our security framework using Azure AD, SAML, and OIDC.

Qualifications

• 6-8 years in security or technology roles.
• 3+ years in IAM with PAM and SSO implementations.
• 4-year degree in IT or equivalent experience.
• Security certifications preferred (CISSP, SANS GSEC, MCSE/MCITP).
• Experience in Windows Server environments.
• Scripting/automation experience preferred.
• Agile/Scrum experience and strong communication skills.

Responsibilities

• Design, implement, and operate security controls across Microsoft and cloud environments (Azure AD focus).
• Develop access control policies within Azure AD and related IAM tooling.
• Provide off-hours support for security-critical changes and incidents.
• Mentor junior staff within Security Engineering and Security Operations.

Skills

IAM/SSO implementation

PAM experience

Security engineering

Cloud security

Scripting/Automation

Agile/Scrum

Communication skills

Education

Bachelor's degree in information technology

Tools

Windows Server

Azure AD

SAML

OIDC

MFA tooling

Job description

At the Federal Home Loan Bank of Chicago, employees come first - that’s why we offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees.Collaborative, in-office operating modelRetirement program (401k and Pension)Medical, dental and vision insuranceLifestyle Spending AccountCompetitive PTO plan11 paid holidays per yearWhat you’ll doThe Senior Security Engineer contributes to the success of the Bank by building a safe and sound technology environment for business operations. This individual will apply their passion for security and technology to create secure, stable and easy to use solutions for Bank personnel and other customers. The team this role is a part of focuses on project work and includes experienced, passionate technology security professionals.How you’ll make an impactModernizes and secures workforce, privileged, and machine identity capabilities across the Bank.Reduces cyber and operational risk through ownership of critical identity security controls and remediation efforts.Drives delivery of strategic identity security initiatives while providing senior technical leadership and mentoringWhat you can expectDesign, implement and operate security controls for various services in the Microsoft and Amazon cloud, with a primary focus in Azure AD.Design and implement access control policies within Azure AD.Occasionally provide support off-hours when business critical problems arise or to implement significant changes.Analyze requirements and apply knowledge of business needs and security risks to determine appropriate course of action.Collaborate with different areas of IT in order to provide security and business technology solutions for the Bank.Development of security policy, standard, procedure and design documents.Design, engineer, and deploy technologies for application integrations such as SAML and OIDCAct as a point of escalation for issues relating to security controls or tools, including (but not limited to) SSO, MFA, certificates, and privileged access management tooling.Provide mentoring to junior staff in the Security Engineering and Security Operations teams.What you’ll bring6-8 years of security or technology experience.3+ years in IAM or other identity focused teams, with direct experience implementing PAM and SSO solutions.4 year college degree in information technology or equivalent experience.Security and technology certifications are highly preferred (CISSP, SANS GSEC, MCSE/MCITP).Experience in a Windows Server Environment.Scripting/automation experience preferred.Experience or interest in working in an agile/scrum format.Outstanding communication (verbal, written, visualization and listening) skills.Self-starter who can work independently as well as in a team setting.Giving and receiving effective feedback across all interactions.Ability to address conflict with peers and others in the organization.Interest in understanding customer perspective to aid in development of the right solution.Commitment to delivering quality solutions.Ability to communicate technical topics to a non-technical audience.Interest in understanding business needs to aid in developing solutions that are right for the broader organization.Interest in working on a broad range of IT projects (Security, IaaS, Automation, Network, VoIP, Database,).Knowledge of IT security controls and infrastructureWorking knowledge of security principles and technology best practices.Experience with Security Assessment and operations.Cloud FundamentalsMonitoring and LoggingSecurity, Identity & ComplianceSecurity Consulting And ReviewSecurity Framework DesignSecurity Stewardship and GovernanceSecurity Systems EngineeringSecurity Training Development and DeliveryIncident and Problem ManagementInfrastructure Monitoring, Event Management, and OperationsIT Risk and Controls AssessmentIT Risk Training Development and DeliveryTechnical LiteracyDistributed Logging, Log Querying, and Log AnalyticsSecure Coding PracticesSalary Range:$90,400.00 - $150,700.00The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors. In addition to the base salary, we offer a comprehensive benefits package which can be found here: https://hrportal.ehr.com/fhlbc