{"id":3897734,"url":"https://alion.io/job/interactive-brokers-sr-engineer-iam","title":"Sr Engineer, IAM","company":{"id":58627,"name":"Interactive Brokers","domain":"interactivebrokers.com","url":"https://alion.io/company/interactive-brokers","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":95,"open_postings":115,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":82,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States","New York, United States","Fort Lauderdale, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PostgreSQL","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-06T11:00:00Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T16:19:45Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"About the role –\nAs a Senior IAM Engineer, you will be a key member of the Enterprise IT organization, serving as a senior hands-on engineer responsible for the design, implementation, and operation of our enterprise-wide Identity and Access Management program.\nThe role will be responsible for engineering and delivering IAM solutions across Identity Governance and Administration (IGA), Identity Providers (IdP/SSO), Privileged Access Management (PAM), and directory services. You will help bring together a complex, distributed identity environment, including Active Directory, Microsoft Entra ID, LDAP/OpenLDAP, SaaS applications, and enterprise platforms, into secure, scalable, automated, and supported identity workflows. The responsibilities include building automation, API-driven integrations, and lifecycle provisioning workflows; serving as a senior technical authority for architecture decisions and escalated engineering issues; driving integration across platforms such as Dayforce, M365, and ServiceNow; providing technical mentorship to other engineers; and collaborating with security, IT, HR, and business stakeholders to translate requirements into engineering deliverables.\nWe are seeking a well-rounded IAM engineer with strong identity fundamentals, broad integration experience, and the ability to apply those skills across evolving technologies. The successful candidate will have deep expertise in enterprise IAM platforms and protocols and will be comfortable assessing existing identity environments, defining target-state architecture, designing practical integration patterns, building automation, and operationalizing solutions through documentation, monitoring, support processes, and continuous improvement. \nWhat will you do:\nDesign, build, and deliver IAM engineering solutions including IGA, IdP/SSO, PAM, and directory services implementations.\nAssess and help rationalize complex identity environments, including distributed Active Directory domains, Entra ID, LDAP/OpenLDAP deployments, application directories, and legacy identity integrations.\nDevelop target-state identity architectures and integration patterns that support cohesive joiner-mover-leaver lifecycle processes, secure access, data quality, and operational scalability.\nConfigure and support IGA capabilities such as identity profiles, authoritative sources, account correlation, attribute mappings, transforms, lifecycle states, sources/connectors, access profiles, roles, entitlements, access requests, approvals, certifications, and separation-of-duties controls.\nDesign, implement, and troubleshoot lifecycle provisioning and deprovisioning workflows across HR systems, directories, SaaS applications, databases, collaboration platforms, and IT service-management tools.\nDevelop, test, and deploy identity automation, API-driven integrations, and lifecycle provisioning workflows\nBuild and maintain IAM configuration promotion and development workflows, including source control, peer review, testing, release management, and platform-specific tooling such as SailPoint Configuration Hub, SP-Config, SDKs, or equivalent tools.\nDesign and maintain RBAC models, including role discovery, role design, entitlement mapping, access-profile design, role lifecycle management, and ongoing troubleshooting of access outcomes.\nConfigure and support IdP/SSO integrations using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and, where needed, WS-Federation and LDAP-based authentication patterns.\nEngineer and support PAM capabilities, including privileged account onboarding, reconciliation, password rotation, verification, decommissioning, safe/vault access controls, approval workflows, least-privilege access, and separation of duties.\nIntegrate PAM platforms with Active Directory/LDAP, MFA, ticketing platforms, SIEM tools, cloud services, CI/CD pipelines, and identity governance solutions.\nAutomate privileged-account onboarding, reporting, health checks, credential operations, and operational tasks through PowerShell, Python, REST APIs, and related tooling.\nServe as a hands-on senior technical resource for complex architecture decisions, design reviews, and escalated engineering issues.\nDiagnose and resolve identity-related issues involving aggregation, provisioning, correlation, authentication, SSO, MFA, directory synchronization, access requests, certifications, privileged credential rotation, session access, and connector or platform health.\nSupport SLAs, incident response, and root-cause analysis for IAM infrastructure.\nDevelop and maintain engineering runbooks, documentation standards, and disaster recovery procedures for identity systems.\nChampion automation-first approaches to reduce manual effort across access provisioning, certification, and onboarding workflows.\nProvide technical guidance, code review, and mentorship to other engineers on the IAM team.\nPartner with security, IT, HR, and business stakeholders to gather requirements and translate them into engineering deliverables.\nWhat you will need to have:\nBachelor’s degree or equivalent in Computer Science, Engineering, or related field.\nMinimum 5 years of hands-on experience in IAM engineering.\nHands-on expertise with enterprise IAM platforms across IGA, IdP/SSO (e.g., Okta, Entra ID), PAM, directory services, lifecycle management, and access governance.\nStrong understanding of IAM fundamentals, including authentication, authorization, RBAC, ABAC concepts, least privilege, separation of duties, access reviews, joiner-mover-leaver processes, identity data management, and privileged access controls.\nExperience implementing or supporting an IGA platform, preferably SailPoint Identity Security Cloud or a comparable enterprise IGA solution.\nExperience with IGA capabilities such as authoritative-source integration, account aggregation, correlation, identity profiles, attribute mappings, provisioning, access requests, approvals, certifications, access profiles, roles, entitlements, and lifecycle workflows.\nStrong knowledge of standards and protocols such as OAuth 2.0, OIDC, SAML 2.0, and SCIM.\nExperience configuring and troubleshooting SSO, provisioning, MFA, directory synchronization, conditional/adaptive access controls, and application integrations in platforms such as Microsoft Entra ID, Okta, or equivalent IdPs.\nExperience with a PAM platform, preferably CyberArk or an equivalent enterprise solution, including privileged-account lifecycle management, safe/vault administration, platform and policy configuration, credential rotation, reconciliation, and session management.\nProven experience building REST API-driven identity integrations and lifecycle automation using Python, PowerShell, Java, or similar languages in orchestration platformes such as Okta Workflows, Gitlab, Jenkins or similar.\nExperience using APIs, scripting, and automation to manage IAM configurations, perform reporting, conduct health checks, and reduce operational overhead.\nExperience with directory services administration and governance, including Active Directory, OpenLDAP, and cloud-based IdPs.\nSolid understanding of identity data management, including attribute normalization, identity matching and correlation, duplicate identity resolution, data-quality remediation and database connectivity concepts (e.g., PostgreSQL, JDBC/ODBC).\nDemonstrated ability to manage competing priorities, deliver under pressure, and lead complex technical workstreams.\nStrong written and verbal communication skills; able to explain technical concepts to diverse audiences.\nWhat would be nice to have:\nDirect experience with SailPoint Identity Security Cloud, including tenants, identity profiles, transforms, sources, workflows, lifecycle states, access governance, APIs, Configuration Hub, SP-Config, SDKs, or related development tooling.\nDirect experience with CyberArk administration, including Digital Vault, PVWA, CPM, PSM, safes, platforms, account management, privileged sessions, and integrations.\nDirect experience with Okta administration, including Universal Directory, Lifecycle Management, group rules, application integrations, MFA, sign-on policies, Okta Workflows, APIs, Terraform, and SCIM provisioning.\nExperience in regulated industries such as financial services, healthcare, etc.\nFamiliarity with Zero Trust principles and their application to identity and access controls.\nIndustry certifications such as CISSP, CISM, or vendor-specific IAM credentials (e.g., Okta Certified Professional).\n\nCompany benefits:\nCompetitive salary, annual performance-based bonus, and stock grant awards\n401(k) retirement plan with competitive company match\nExcellent health and wellness benefits, including medical, dental, and vision benefits. 100% employer-paid medical premiums, with generous employer contributions to dental & vision plans as well.\nWellness screening and assessments, health coaches, and counseling services through an Employee Assistance Program (EAP)\nGenerous paid parental leave (up to 16 weeks paid parental leave for eligible employees)\nCompany-paid basic life insurance, accidental death & dismemberment (AD&D), and short- and long-term disability coverage\nFlexible Spending Accounts (Healthcare, Dependent Care, and Commuter FSAs)\nQuarterly fitness stipend to offset costs associated with traditional gym and fitness memberships or fees\nEducation reimbursement and professional development opportunities\nLegal services, telehealth access, and voluntary insurance options\nBackup child and adult care support through Care.com\nDaily lunch allowance and fully stocked kitchen with healthy breakfast and snack options","description_format":"text","description_chars":9628,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Professional development","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-11-06T23:37:54Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 23 · green card filings: 3","filings_12m":23,"filings_prev_12m":24,"green_card_filings_12m":3,"median_offered_wage_usd":159231,"route":null,"cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":82,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/interactive-brokers-sr-engineer-iam","json_url":"https://alion.io/job/interactive-brokers-sr-engineer-iam.json","meta":{"generated_at":"2026-11-07T18:43:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28608,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58627},"rest":"https://alion.io/mcp/rest/get_company?id=58627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finteractive-brokers-sr-engineer-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finteractive-brokers-sr-engineer-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finteractive-brokers-sr-engineer-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interactive-brokers-sr-engineer-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finteractive-brokers-sr-engineer-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3897734}},{"tool":"search_jobs","arguments":{"company":"interactivebrokers.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3897734},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}