Senior Engineer, Identity and Access Management

Intercontinental Exchange, Inc. (ICE) is a leading operator of global exchanges, clearing houses, data, and listings services. We connect businesses around the world to unique opportunities in markets that drive the global economy. We are a diverse and inclusive company that values innovation, collaboration, and excellence. ICE team members work across departments and traditional boundaries to innovate and respond to industry demand. A successful candidate will be able to multitask in a dynamic team-based environment demonstrating strong problem-solving and decision-making abilities and the highest degree of professionalism.

As an Identity and Access Management (IAM) professional, you will be responsible for ensuring the security and integrity of our IT systems and applications. You will design, implement, and maintain policies and systems that control user identities, credentials, roles, and permissions across various IT platforms and applications. You will also monitor and audit user activities, troubleshoot issues, and comply with IT standards and regulations. To succeed in this role, you will need strong technical skills, analytical thinking, problem-solving abilities, and knowledge of IT security best practices.

Responsibilities

• Application & Infrastructure Maintenance
  • Administer, maintain, and support ForgeRock/Ping OpenIDM and OpenDS directory services in production and non-production environments
  • Monitor system health, performance, and availability; perform proactive tuning and capacity planning
  • Manage directory replication, schema extensions, indexing, and access control policies
  • Perform upgrades, patching, and configuration changes in accordance with change management processes
  • Troubleshoot and resolve complex issues related to directory services, authentication, and identity workflows
  • Maintain high availability and disaster recovery configurations for IAM infrastructure
• Linux Administration
  • Manage and maintain Linux-based servers hosting IAM applications and directory services
  • Perform OS-level troubleshooting, log analysis, and performance diagnostics
  • Implement and maintain system hardening standards and security configurations
  • Coordinate with infrastructure teams on server provisioning, networking, and storage
• Scripting & Automation
  • Develop and maintain scripts to automate routine operational tasks, monitoring, and reporting (Bash, Python, or similar)
  • Automate provisioning, de-provisioning, and reconciliation workflows
  • Build tooling to support bulk directory operations, data migrations, and schema management
  • Maintain and improve CI/CD pipelines related to IAM configuration and deployments
• AI Adoption & Enablement
  • Stay current with emerging AI tools and capabilities relevant to IAM operations, security, and automation
  • Identify and champion opportunities to incorporate AI-assisted tooling into day-to-day workflows, such as anomaly detection, access pattern analysis, and automated remediation
  • Use AI coding and scripting assistants responsibly to accelerate development of automation and operational tooling
  • Contribute to team best practices and guardrails around responsible AI usage in an identity and security context
• Other
  • Partner with security, application, and infrastructure teams to integrate identity services with enterprise applications
  • Produce and maintain technical documentation including runbooks, architecture diagrams, and standard operating procedures
  • Participate in on-call rotation and provide escalation support for P1/P2 incidents
  • Mentor junior team members and contribute to team knowledge sharing
  • Works independently on many IT projects as a project team member, more frequently as a project leader.
  • Often provides strategic direction, guidance, and integration of services.
  • Communicate verbally and in writing to technical and non-technical audiences of various levels both internally and externally
  • Develop partnership-oriented relationships with business executives and functional leaders, especially as it relates to operations and technology
  • Multitask in a fast-paced environment with a focus on timeliness, documentation, and communications with peers and business users
  • Involved in the evaluation of products and/or procedures to enhance productivity and effectiveness.

Knowledge and Experience

• Bachelor’s degree in Computer Science, Information Systems, or an equivalent combination of education, training, or work experience
• 5+ years of experience in Identity & Access Management or directory services engineering
• Hands-on experience with ForgeRock OpenIDM and/or OpenDS (or Ping Identity directory products)
• Strong Linux administration skills (RHEL preferred)
• Proficiency in scripting languages such as Bash and/or Python for automation and operational tooling
• Solid understanding of LDAP concepts: schema, replication, ACIs, indexing, and directory architecture
• Experience supporting enterprise IAM in a production environment
• Experience designing, implementing, or supporting multi-factor authentication (MFA) solutions, including hardware tokens, YubiKeys, authenticator applications, push notifications, and/or certificate-based authentication.
• Familiarity with authentication protocols: LDAP, Kerberos, SAML, OAuth2/OIDC
• Strong troubleshooting and root cause analysis skills
• Requires extensive knowledge of relevant IT system issues, techniques, and implications across all existing server platforms.
• Must have extensive knowledge in networking, databases, systems, and/or Web operations.

Desirable Knowledge and Experience

• Knowledge of ICE business environment and the ability to evaluate implications of changes to IT systems
• Experience with additional ForgeRock/Ping Identity products (AM, PingFederate, PingDirectory)
• Familiarity with HashiCorp Vault or other secrets management solutions
• Experience with containerization (Docker/Kubernetes) in the context of IAM workloads
• Knowledge of SCIM provisioning standards
• Exposure to cloud environments (AWS, Azure, or GCP) and hybrid identity architectures
• ForgeRock Certified Identity Professional or equivalent certification
• Knowledge of relevant legal and regulatory requirements
• Knowledge of common Identity Access Management frameworks
• Experience working with a diverse range of data sources/streams and managing these effectively
• Excellent analytical, decision-making, and problem-solving skills
• Knowledge of multiple operating systems and related utilities and hardware
• Knowledge of storage management, TCP/IP, and network monitoring and tools
• Strong background in operations, processes, solutions, and technologies
• Strong understanding of policy, compliance, and best practice Identity Access Management principles
• Working knowledge of Linux, Windows, and Network Operating Systems
• Knowledge of infrastructure, key processes, and technology-oriented risk issues, specifically around Identity Access Management and privacy
• Results oriented, business focused, and successful at interfacing across multiple organizational units
• Professional certification such as CISSP, CISM, etc.

Must-Have Skills

• PingDirectory / PingDS Administration
• Experience with PingDS (formerly ForgeRock Directory Services).
• Strong understanding of enterprise directory services administration and support.
• PingIDM / ForgeRock IDM
• Experience with PingIDM (formerly ForgeRock IDM).
• Knowledge of identity lifecycle management, provisioning, and directory integration.
• Product Administration Experience
• Hands-on administration and operational support of IAM products.
• Experience handling user requests, troubleshooting, and platform support.
• Linux Administration
• Strong Linux administration skills.
• Experience managing distributed environments and troubleshooting Linux-based services.
• Important because the directory services platform operates across a large server footprint.

Preferred Skills

• Multi-Factor Authentication (MFA)
• Experience with MFA technologies.
• Exposure to WebADM or similar MFA solutions is desirable.
• Directory Services Expertise
• LDAP concepts, replication, schema management, performance tuning, backups, and troubleshooting.
• Enterprise-scale directory management experience.