{"id":692789,"url":"https://alion.io/job/drw-lead-iam-architect","title":"Staff IAM Engineer","company":{"id":58537,"name":"DRW","domain":"drw.com","url":"https://alion.io/company/drw","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":84,"open_postings":151,"ghost_share":0.185,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":73,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"Kubernetes","optional":true},{"name":"Ping Identity","optional":true},{"name":"Prometheus","optional":true},{"name":"Splunk","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-11T00:51:22Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-11-08T19:16:26Z","board_verified":true,"closed_at":null,"days_open":58,"trust":{"level":"ok","repost_count":1,"flags":["company_stale"],"days_open":58},"description":"DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.\nHeadquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.\nWe operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters-it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus.\nThe Team: \nThe IAM Team is a net-new, vanguard group that will own, implement, and drive DRW’s comprehensive identity capabilities, aligning them to evolving business requirements. This dedicated group collaborates with stakeholders to advance agentic identity, enhanced authentication and authorization controls, and other emerging identity and security innovations, with potential expansion into customer identity and access management (CIAM). \nThe Role: \nWe are seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of our enterprise authentication and authorization services. The IAM team is responsible for the security, compliance, availability, and user experience of these services; you'll execute implementations, participate in and influence design decisions, and ensure integrations across on-prem and cloud environments meet SLAs and control requirements. The role focuses on SSO, federation, MFA, and secure access management. \nKey Responsibilities: \nOwn, implement, and operate end-to-end enterprise authentication and federation solutions; drive architecture reviews and collaborate to influence design decisions, ensuring security, compliance, availability, and performance. \nImplement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT-based integrations. \nIntegrate identity solutions with enterprise, third-party applications, APIs, SaaS platforms, and custom web/mobile apps, including SSO, provisioning (SCIM/API), and secure API authentication. \nImplement MFA, adaptive authentication, fine-grained access policies, and authorization models that meet security standards. \nSupport identity lifecycle and directory integrations with IAM and directory services (e.g., Entra ID/Azure AD, Active Directory, ADFS) and provisioning systems. \nTroubleshoot authentication/authorization flows; perform root-cause analysis, incident response, and performance tuning. \nEnsure compliance with security, audit, and regulatory requirements and support related assessments. \nCollaborate closely with security, infrastructure, application, and DevOps teams to deliver and operate identity services. \nCreate and maintain runbooks, SOPs, operational procedures, and technical documentation. \nRequired Qualifications: \nStrong written and verbal communication, stakeholder management, and cross-team collaboration skills. \n5+ years of experience in Identity & Access Management (IAM), or equivalent hands-on experience. \nStrong hands-on experience implementing and operating commercial identity platforms and enterprise identity services (Ping AIC and PingFederate preferred, or the ability to implement required features in Ping). \nDeep knowledge of SSO, federation, and authentication/authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect, JWT). \nExperience integrating with directory and lifecycle systems (Active Directory/LDAP, Azure AD/Entra ID, ADFS) and provisioning (SCIM/API). \nPractical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement. \nStrong troubleshooting skills across authentication flows, certificates, TLS, networking, and related infrastructure. \nScripting/automation skills (Shell, Python, Go, PowerShell) and familiarity with IaC/CI-CD tools (Terraform, Ansible, or similar). \nComfortable working in Linux environments and producing operational runbooks and technical documentation. \nBonus Points: \nExperience in banking or financial services (regulated enterprise environments). \nHands-on cloud experience (AWS, Azure/Entra, or GCP) and container platforms (Docker, Kubernetes). \nExperience with API security, OAuth/OIDC for APIs, and zero-trust architectures/use cases. \nPractical experience with CIAM or customer identity projects. \nPing Identity certifications or other security/identity certifications. \nObservability and monitoring experience for identity services (Prometheus, ELK, Splunk, etc.) \n\nThe annual base salary range for this position is $150,000 to $200,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.\nFor more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice.\nCalifornia residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice.\n[#LI-LD1]","description_format":"text","description_chars":5737,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hedge Funds & Alternative Investments"],"lifecycle":[{"event":"open","at":"2026-09-11T01:23:35Z"},{"event":"close","at":"2026-09-11T16:54:21Z"},{"event":"reopen","at":"2026-09-18T16:08:25Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 40 · green card filings: 12","filings_12m":40,"filings_prev_12m":43,"green_card_filings_12m":12,"median_offered_wage_usd":164423,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.895,"p_room":0.6,"age_days":58,"expected_fill_days":73,"reasons":["conf:2","velocity","win:late","crowd:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":false},"html_url":"https://alion.io/job/drw-lead-iam-architect","json_url":"https://alion.io/job/drw-lead-iam-architect.json","meta":{"generated_at":"2026-11-08T22:19:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":46618,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58537},"rest":"https://alion.io/mcp/rest/get_company?id=58537"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdrw-lead-iam-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdrw-lead-iam-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdrw-lead-iam-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/drw-lead-iam-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdrw-lead-iam-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":692789}},{"tool":"search_jobs","arguments":{"company":"drw.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":692789},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}