About the Role
DRW is seeking an experienced Identity Engineer to join a net-new IAM team that owns, implements, and drives the firm's comprehensive identity capabilities, aligning them to evolving business requirements. The team focuses on SSO, federation, MFA, and secure access management, and collaborates with stakeholders to advance agentic identity, enhanced authentication and authorization controls, with potential expansion into CIAM.
- Own the delivery, operation, and continuous improvement of enterprise authentication and authorization services, ensuring security, compliance, availability, and user experience.
- Execute implementations, participate in and influence design decisions, and ensure integrations across on-prem and cloud environments meet SLAs and control requirements.
- Drive architecture reviews and collaborate with security, infrastructure, application, and DevOps teams to deliver and operate identity services.
- Troubleshoot authentication/authorization flows, perform root-cause analysis, incident response, and performance tuning.
Requirements
- Strong written and verbal communication, stakeholder management, and cross-team collaboration skills.
- 5+ years of experience in Identity & Access Management (IAM), or equivalent hands-on experience.
- Strong hands-on experience implementing and operating commercial identity platforms and enterprise identity services (Ping AIC and PingFederate preferred, or the ability to implement required features in Ping).
- Deep knowledge of SSO, federation, and authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect, JWT).
- Experience integrating with directory and lifecycle systems (Active Directory/LDAP, Azure AD/Entra ID, ADFS) and provisioning (SCIM/API).
- Practical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement.
- Strong troubleshooting skills across authentication flows, certificates, TLS, networking, and related infrastructure.
- Scripting/automation skills (Shell, Python, Go, PowerShell) and familiarity with IaC/CI-CD tools (Terraform, Ansible, or similar).
- Comfortable working in Linux environments and producing operational runbooks and technical documentation.
- Bonus: Experience in banking or financial services (regulated enterprise environments).
- Bonus: Hands-on cloud experience (AWS, Azure/Entra, or GCP) and container platforms (Docker, Kubernetes).
- Bonus: Experience with API security, OAuth/OIDC for APIs, and zero-trust architectures/use cases.
- Bonus: Practical experience with CIAM or customer identity projects.
- Bonus: Ping Identity certifications or other security/identity certifications.
- Bonus: Observability and monitoring experience for identity services (Prometheus, ELK, Splunk, etc.)
What You'll Get
- $150k–$200k base salary
- Group medical, pharmacy, dental and vision insurance
- 401k (with discretionary employer match)
- Short and long-term disability insurance
- Life and AD&D insurance
- Health savings accounts
- Flexible spending accounts