IAM Engineer

IAM Engineer

Recruiting

Location:

US-IL-Chicago

Department:
Information Technology

The Identity & Access Management Engineer (IAM Engineer) is responsible for identifying, delivering and supporting the technology used to deliver Sidley's overall Identity & Access Management program, which is designed to ensure the Firm's user identities, accounts, credentials and system access are fully and completely managed for all system users. The Engineer is responsible for the current technology in place (Okta Verify/SSO, Microsoft/Azure AD, Delinea, etc) and ensuring successful operations, interoperability and general well-being.

The incumbent will work proactively with IAM Manager and IAM Architect and various IT and business departments to implement services that meet Sidley's current and future IAM needs.

The IAM Engineer is a proven technologist and a hands on problem solver, as well as an effective internal consultant, who will regularly advise others on access and security/risk related issues. The incumbent must possess domain competencies in a number of related disciplines, including security, risk, access control, overseeing backend technology with Okta, ARS/AD/Azure (on premises and Cloud based) authentication, multi factor authentication and entitlements reviews.

• Work with the IAM Manager to build out and oversee the IAM function's technical controls and its related activities including planning, solutioning, testing, reporting and delivering IAM services.
• Oversee the implementation of all current solutions to ensure they are configured appropriately and are delivering maximum value for the Firm. Review current documentation such as Procedures, run books, and Knowledge Base Articles used by the Service Desk. Review and/or establish Best Practices where applicable.
• Engage and interact with other IT Departmental Engineers to ensure future efforts (ours and theirs) result in continued uninterrupted delivery of all IAM services.
• Demonstrate extensive understanding of IAM concepts such as directory services, SSO, federation, MFA, provisioning, access certification, roles and SOD.
• The analysis, design, implementation, and maintenance of all layers of IAM applications, including Authorization / Authentication and Account Creation / Management / Provisioning / Retirement in data repositories. Including; strategy, organizational design, process re-engineering and technology implementation.
• Functional area
  
  s and work experience should include fine-grained access control, policy driven security, Identity Governance, Access Management, and Privileged access management, user provisioning/de-provisioning, and federation.
• Provide support with respect to requirements gathering, project management and delivery of one or more Identity platforms, such as SailPoint (Identity IQ), Okta, and Saviynt.
• Serve as the central point of contact for information security and IAM policy and process related issues.
• Address Vulnerabilities, Pentest findings and audit issues in a timely manner.
• Participate in a 24x7x365 on-call rotation.
• Stay abreast of industry trends, solution landscape and market conditions and update peers and management accordingly.
• Other duties, as assigned.

Salaries vary by location and are based on numerous factors, including, but not limited to, the relevant market, skills, experience, and education of the selected candidate. If an estimated salary range for this role is available, it will be provided in our Target Salary Range section. Our compensation package also includes bonus eligibility and a comprehensive benefits program. Benefits information can be found at

$118,900 - $169,000 if located in Illinois

To perform this job successfully, an individual must be able to perform the Duties and Responsibilities (Duties) above satisfactorily and meet the requirements below. The requirements listed below are representative of the minimum knowledge, skill, and/or ability required. Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of the job. If you need such an accommodation, please email…