IT Security Engineer - IAM

IT Security Engineer Identify and Access Management (IAM) Focus Chicago, IL - 3 days onsite in Loop, 2 days WFH What you'll be doing The IT Security Engineer will focus on the IAM function of IT Security, identifying, delivering and supporting the technology used to deliver on all IAM initiatives, which is specifically designed to ensure the user identities, accounts, credentials and system access are fully and completely managed for all system users. We use the following tech stack to accomplish this, so if you have experience in these areas, that would be great, but experience with the specific tools are not required: Okta Verify/SSO, Cyberark, Windows Server, Azure, AD, Azure AD. You'll work with the IAM Manager and IAM Architect to execute on new project initiatives, in addition to supporting daily IAM engineering operations. Ideally looking for candidates working in hybrid cloud environments, or having a background with both on-prem and cloud-based IAM. What you'll be doing You'll be working in the following functional areas: policy driven security, Identity Governance, Access Management, and Privileged access management, user provisioning/de-provisioning, and federation. Thus, you will work with the IAM Manager to build out and oversee the IAM function's technical controls and its related activities including planning, testing, reporting and delivering IAM services. The analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization / Authentication and Account Creation / Management / Provisioning / Retirement in data repositories. Including; strategy, organizational design, process re-engineering and technology implementation. Oversee the implementation of all current solutions to ensure they are configured appropriately and are delivering maximum value. Review current documentation such as Procedures, run books, and Knowledge Base Articles used by the Service Desk. Engage and interact with other IT Departmental Engineers to ensure future efforts result in continued uninterrupted delivery of all IAM services. Provide support with respect to requirements gathering, project management and delivery of one or more Identity platforms, such as SailPoint (Identity IQ), Okta, and Saviynt. Serve as the central point of contact for information security and IAM policy and process related issues. Address Vulnerabilities, Pentest findings and audit issues in a timely manner. Participate in a 24x7x365 on-call rotation Stay abreast of industry trends, solution landscape and market conditions and update peers and management accordingly. Skills we're seeking 3 years of experience in IT Security At least 2 years of experience with IAM Engineering Must have strong Active Directory experience Biggest nice to have skills, in no particular order: Okta Verify, SailPoint (Identity IQ) or Saviynt experience (ideally Okta Verify) CyberArk Azure / Azure AD / GPO Management Windows Server Other nice to have experience: Bachelor's Degree and/or relevant certifications GRC experience with frameworks such as COBIT, ISO and/or ITIL Experience in other areas of IT Security Experience working in a professional services environment