{"id":1401745,"url":"https://alion.io/job/early-warning-services-sr-identity-access-management-engineer-iam","title":"Sr Identity & Access Management Engineer (IAM)","company":{"id":46312,"name":"Early Warning Services","domain":"earlywarning.com","url":"https://alion.io/company/earlywarning","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":11,"ghost_share":0,"stale_share":0.636,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108000,"max":149000,"currency":"USD","period":"year","gross":null,"usd_annual":149000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"Postman","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOAP","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false},{"name":"Agile","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CyberArk","optional":true},{"name":"Delinea","optional":true},{"name":"PKI","optional":true}],"status":"live","first_seen_at":"2026-09-28T16:00:26Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-22T13:26:19Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"At Early Warning, we’ve powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle®, Paze®, and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.\nEarly Warning follows a hybrid work model to allow for a more collaborative working environment.\nCandidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.\nOverall Purpose\nThe Senior IAM Engineer sits within the Identity Platform Operations team, part of the broader Identity and Access Management department, and serves as the technical anchor for Early Warning's Identity Governance and Administration (IGA) platform. This role leads the discovery, design, delivery, and operational health of Saviynt Enterprise Identity Cloud (EIC) and the governance controls that determine how identities are provisioned, certified, and constrained across a regulated financial technology environment.\nThis is a hands on, deeply specialized position rather than a generalist infrastructure role. The engineer is accountable for architecting access models, hardening segregation of duties controls, maintaining accurate technical documentation of supported systems, participating in audit and compliance activities, and serving as a subject matter expert in identity and access management. The role also carries a mandate to prototype new solutions to identity challenges, optimize existing systems, and evaluate emerging technologies as they become available.\nEssential Functions\nPlatform Ownership and Engineering\nOwns the architecture, configuration, and operations of the Saviynt EIC platform, including access request, certification, and lifecycle management modules.\nProvides operational excellence for the identity governance platform including version maintenance, vulnerability management, patching, and overall platform health.\nProactively monitors and maintains identity platform security assurances such as threat detection, user behavior analytics, and privileged user monitoring.\nBuilds and manages connectors and integrations across directories, cloud platforms, databases, and enterprise applications, including Active Directory, Entra ID, Okta, ServiceNow, Workday, SAP, cloud infrastructure, and custom REST based endpoints.\nAuthors PowerShell, Python, and other scripts to automate repetitive tasks and extend platform capability.\nGovernance, Controls, and Risk\nDesigns and maintains identity governance controls including access certification and attestation campaigns, segregation of duties (SoD) rulesets, role based and attribute based access models (RBAC and ABAC), and least privilege enforcement.\nAutomates the full identity lifecycle covering joiner, mover, and leaver events, including provisioning, deprovisioning, and access reconciliation, minimizing manual intervention and standing access.\nEnsures just in time and just enough access is enforced without hindering productivity or user experience.\nDevelops and tunes workflows, rules, analytics, and reporting to detect access risk and drive remediation.\n\nPartners with internal audit, risk, and compliance to support control testing and evidence collection for regulatory frameworks relevant to financial services, including SOX, PCI DSS, GLBA, and related audit obligations.\nDesign, Delivery, and Quality\nGathers requirements from business, security, and audit stakeholders, decomposes them into discrete technical components, and translates them into usable solutions incorporated into platform design.\nEstablishes repeatable and reusable frameworks, patterns, and reference designs so that solutions scale consistently rather than being rebuilt for each use case.\nPlans and executes both manual and automated testing across configurations, integrations, and workflows, validating that solutions meet functional, security, and compliance requirements before release.\nLeads root cause analysis and resolution of complex identity issues spanning provisioning failures, entitlement drift, and integration breaks.\nDefines technical standards, patterns, and documentation that make the platform sustainable and repeatable as it scales.\nCollaboration and Leadership\nContinuously evaluates the IAM organizational structure, system configuration, and application integrations, and provides recommendations for operational and security enhancements.\nCollaborates with Enterprise Architects, Security Architects, and Application Architects to drive adoption of IAM best practices and to support documentation standards.\nDevelops relationships with business and technology stakeholders to ensure on time delivery.\nActively participates in team stand up, technical engineering discussions, change control process, audit activities, business continuity efforts, and on call rotation.\nMentors, coaches, and trains junior systems engineers, and models a strong sense of responsibility, ownership, and pride in delivering quality results.\nContributes to the broader identity roadmap, advising leadership on platform strategy, emerging risks, and modernization opportunities.\nSupports the company's commitment to risk management and to protecting the integrity and confidentiality of systems and data.\nIdentity Governance Focus\nProgressive experience and advanced proficiency with Saviynt Enterprise Identity Cloud, including connector development, workflow configuration, rule and role engineering, and certification campaign design and execution.\nExpert understanding of identity governance administration constructs including attestations, analytics, connectors, rules, users, accounts, account ownership, roles, entitlements, entitlement ownership, security systems, and endpoints.\nDevOps support for IGA solutions to include incident and request management and implementation of new functionality including new integrations.\nExperience integrating IGA solutions with two or more platforms such as Active Directory, Entra ID, Okta, Workday, ServiceNow, and Amazon Web Services.\nWorking knowledge of SQL, REST, SOAP, JSON, XML, Groovy, and PowerShell.\nExperience developing and testing new integrations and configurations, including API testing through tools such as Postman.\nMinimum Qualifications\nEducation and experience typically obtained through completion of a Bachelor's degree in Computer Science, Information Technology, Information Systems, Information Assurance, Cybersecurity or a related field, or equivalent work experience.\nTypically a minimum 5 years of progressive relevant experience in identity and access management, including hands on implementation and operation of enterprise IGA platforms in production.\nMinimum 3 years of hands on production experience with Saviynt Enterprise Identity Cloud, or equivalent depth in a comparable enterprise IGA platform with demonstrated ability to transition to Saviynt.\nDeep command of identity governance principles including access certification, segregation of duties, RBAC and ABAC design, entitlement management, and least privilege enforcement.\nProven experience designing and automating identity lifecycle processes across heterogeneous systems.\nStrong working knowledge of core identity and access concepts including directory services, authentication, and federation (SAML, OIDC, OAuth), single sign on, multi factor authentication, and identity lifecycle management.\nProficiency with scripting and integration technologies including Python, PowerShell, SQL, and REST APIs.\nDemonstrated testing experience across both manual and automated approaches, including test planning, execution, and validation of integrations and workflows against functional and security requirements.\nStrong requirements engineering ability, including eliciting requirements, decomposing complex needs into discrete components, and translating them into usable solutions and design.\nDemonstrated experience supporting audit and compliance requirements in a regulated environment.\nTrack record of operating at a senior engineering level, including owning technical solutions end to end, resolving ambiguous problems independently, and influencing partners and stakeholders.\nAbility to perform duties independently, without direct supervision and detailed guidance.\nAbility to work in a fast paced dynamic environment that often requires shifting priorities.\nStrong organizational and time management skills with the ability to communicate and collaborate effectively with team members and cross functional teams.\nComfortable working in Windows and macOS end user compute environments.\nBackground and drug screen.\nPreferred Qualifications\nDirect experience in financial services, financial technology, or another highly regulated industry.\nSaviynt certification or equivalent demonstrated expertise.\nEffective delivery in a highly regulated environment such as PCI DSS.\nExposure to complementary IGA and IAM tooling such as SailPoint, Oracle Identity Manager, CyberArk, Delinea, or Okta, and familiarity with privileged access management concepts.\nMicrosoft Azure and AWS cloud experience, including governing access to cloud workloads.\nProficiency with Active Directory PKI, key management, certificate authority, or related platforms.\nExperience working within Agile or SAFe delivery models and CMMI aligned process maturity.\nAbility to drive strategy sessions for the planning, development, and delivery of work efforts.\nOther IAM or information security role based certifications.\nThe above job description is not intended to be an all inclusive list of duties and standards of the position. Incumbents will follow instructions and perform other related duties as assigned by their supervisor.\nPhysical Requirements\nWorking conditions consist of a normal office environment. Work is primarily sedentary and requires extensive use of a computer and involves sitting for periods of approximately four hours. Work may require occasional standing, walking, kneeling, and reaching. Must be able to lift ten pounds occasionally and/or negligible amount of force frequently. Requires visual acuity and dexterity to view, prepare, and manipulate documents and office equipment including personal computers. Requires the ability to communicate with internal and/or external customers.\nEmployee must be able to perform essential functions and physical requirements of position with or without reasonable accommodation.\nCandidates responding to this posting must independently possess the eligibility to work in the United States at the date of hire.\nThe base pay scale for this position in:\nChicago, IL in USD per year is: $108,000 - $149,000.\nAdditionally, candidates are eligible for a discretionary incentive plan and benefits.\nThis pay scale is subject to change and is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific candidate, which is always dependent on legitimate factors considered at the time of job offer. Early Warning Services takes into consideration a variety of factors when determining a competitive salary offer, including, but not limited to, the job scope, market rates and geographic location of a position, candidate’s education, experience, training, and specialized skills or certification(s) in relation to the job requirements and compared with internal equity (peers). The business actively supports and reviews wage equity to ensure that pay decisions are not based on gender, race, national origin, or any other protected classes.\nSome of the Ways We Prioritize Your Health and Happiness\nHealthcare Coverage - Competitive medical (PPO/HDHP), dental, and vision plans as well as company contributions to your Health Savings Account (HSA) or pre-tax savings through flexible spending accounts...","description_format":"text","description_chars":13916,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Hybrid work","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Fraud Detection","Payment Processing & Gateways","RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-09-28T16:00:26Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 27 · green card filings: 21","filings_12m":27,"filings_prev_12m":57,"green_card_filings_12m":21,"median_offered_wage_usd":148125,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":46,"band":"ok","label":"Likely open","p_open":1,"p_active":0.609,"p_room":0.75,"age_days":24,"expected_fill_days":29,"reasons":["conf:16","stale_co","urgency","velocity","win:late"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":149000,"is_top_pay":false},"html_url":"https://alion.io/job/early-warning-services-sr-identity-access-management-engineer-iam","json_url":"https://alion.io/job/early-warning-services-sr-identity-access-management-engineer-iam.json","meta":{"generated_at":"2026-10-24T02:51:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4552,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46312},"rest":"https://alion.io/mcp/rest/get_company?id=46312"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fearly-warning-services-sr-identity-access-management-engineer-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fearly-warning-services-sr-identity-access-management-engineer-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fearly-warning-services-sr-identity-access-management-engineer-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/early-warning-services-sr-identity-access-management-engineer-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fearly-warning-services-sr-identity-access-management-engineer-iam"}]}