• REMOTE Sr. IAM Security Engineer

    Insight Global (Brookfield, WI)


    Job Description

    Insight Global is seeking a Senior Identity and Access Management (IAM) Engineer to join our clients growing team! In this role, you will play a crucial role in designing, implementing, and maintaining robust identity and access management solutions. Our ideal candidate will have a deep understanding of IAM principles, strong technical expertise, and the ability to collaborate across teams to enhance our overall cybersecurity posture.

    Responsibilities include:

    • IAM solution design and implementation

    • Define a strategy for IAM that aligns with business needs for clients, data sources, and workflows

    • Improve security and user experience of authentication by leveraging modern frictionless solutions

    • Manage end-to-end projects, including requirements gathering, solution design, implementation, testing, deployment and transition to operations

    • Configure and manage authentication mechanisms, such as multi-factor authentication (MFA), single sign-on (SSO), and adaptive authentication

    • Collaborate with cross-functional teams to integrate IAM solutions with other security and IT systems

    • Work closely with software engineers and teams to ensure seamless integration of IAM controls within applications

    • Collaborate with stakeholders across the organization to understand business needs and translate them into technical requirements, with a view to optimizing IAM functionality

    • Develop and maintain access control policies, procedures, and standards to ensure compliance with regulatory requirements and industry best practices

    • Lead the troubleshooting of IAM-related issues, providing support as needed with a deep understanding of IAM architecture

    • Stay abreast of emerging IAM trends and technologies

     

    We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

    Skills and Requirements

    • 10+ years of relevant security engineering experience

    • 5+ years of direct experience within Identity Access Management

    • Prior experience with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity

    • Strong understanding of IAM protocols like OAuth, SAML, OIDC and LDAP

    • Experience in configuration of IAM solutions for API web and web authentication use cases

    • Experience with cloud platforms such as AWS, Azure or Google Cloud – AWS highly preferred

    • REST API integration experience

    • Experience in implementing and supporting modern authentication and authorization solutions including Risk-based MFA, Secrets management and Privileged Access Management

    • Proficiency in languages such as Terraform, JavaScript, or other scripting languages for automation and integration tasks • Continued education and/or advanced degree(s)

    • Experience in environments subject to HIPAA and/or PCI regulations

    • Experience in software-as-a-service, actuarial science, and/or insurance underwriting industry

    • CISSP preferred

    • General understanding of DevOps methodology

    • Product Management experience

    • Knowledge of PKI and other cybersecurity domains

    • API Gateway experience

    • Security knowledge of session management

    • Privileged Access Management experience