{"id":3201295,"url":"https://alion.io/job/intercontinental-exchange-senior-engineer-identity-and-access-management","title":"Senior Engineer, Identity and Access Management","company":{"id":58612,"name":"Intercontinental Exchange","domain":"ice.com","url":"https://alion.io/company/intercontinental-exchange","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":{"grade":"B","score":80,"open_postings":37,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Ping Identity","optional":false},{"name":"Python","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"Kubernetes","optional":true},{"name":"TCP/IP","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-16T12:21:00Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-26T21:30:33Z","board_verified":true,"closed_at":null,"days_open":40,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":40},"description":"Intercontinental Exchange, Inc. (ICE) is a leading operator of global exchanges, clearing houses, data, and listings services. We connect businesses around the world to unique opportunities in markets that drive the global economy. We are a diverse and inclusive company that values innovation, collaboration, and excellence. ICE team members work across departments and traditional boundaries to innovate and respond to industry demand. A successful candidate will be able to multitask in a dynamic team-based environment demonstrating strong problem-solving and decision-making abilities and the highest degree of professionalism.\nAs an Identity and Access Management (IAM) professional, you will be responsible for ensuring the security and integrity of our IT systems and applications. You will design, implement, and maintain policies and systems that control user identities, credentials, roles, and permissions across various IT platforms and applications. You will also monitor and audit user activities, troubleshoot issues, and comply with IT standards and regulations. To succeed in this role, you will need strong technical skills, analytical thinking, problem-solving abilities, and knowledge of IT security best practices.\nResponsibilities\nApplication & Infrastructure MaintenanceAdminister, maintain, and support ForgeRock/Ping OpenIDM and OpenDS directory services in production and non-production environments\nMonitor system health, performance, and availability; perform proactive tuning and capacity planning\nManage directory replication, schema extensions, indexing, and access control policies\nPerform upgrades, patching, and configuration changes in accordance with change management processes\nTroubleshoot and resolve complex issues related to directory services, authentication, and identity workflows\nMaintain high availability and disaster recovery configurations for IAM infrastructure\n\nLinux AdministrationManage and maintain Linux-based servers hosting IAM applications and directory services\nPerform OS-level troubleshooting, log analysis, and performance diagnostics\nImplement and maintain system hardening standards and security configurations\nCoordinate with infrastructure teams on server provisioning, networking, and storage\n\nScripting & AutomationDevelop and maintain scripts to automate routine operational tasks, monitoring, and reporting (Bash, Python, or similar)\nAutomate provisioning, de-provisioning, and reconciliation workflows\nBuild tooling to support bulk directory operations, data migrations, and schema management\nMaintain and improve CI/CD pipelines related to IAM configuration and deployments\n\nAI Adoption & EnablementStay current with emerging AI tools and capabilities relevant to IAM operations, security, and automation\nIdentify and champion opportunities to incorporate AI-assisted tooling into day-to-day workflows, such as anomaly detection, access pattern analysis, and automated remediation\nUse AI coding and scripting assistants responsibly to accelerate development of automation and operational tooling\nContribute to team best practices and guardrails around responsible AI usage in an identity and security context\n\nOtherPartner with security, application, and infrastructure teams to integrate identity services with enterprise applications\nProduce and maintain technical documentation including runbooks, architecture diagrams, and standard operating procedures\nParticipate in on-call rotation and provide escalation support for P1/P2 incidents\nMentor junior team members and contribute to team knowledge sharing\nWorks independently on many IT projects as a project team member, more frequently as a project leader.\nOften provides strategic direction, guidance, and integration of services.\nCommunicate verbally and in writing to technical and non-technical audiences of various levels both internally and externally\nDevelop partnership-oriented relationships with business executives and functional leaders, especially as it relates to operations and technology\nMultitask in a fast-paced environment with a focus on timeliness, documentation, and communications with peers and business users\nInvolved in the evaluation of products and/or procedures to enhance productivity and effectiveness. \n\nKnowledge and Experience\nBachelor’s degree in Computer Science, Information Systems, or an equivalent combination of education, training, or work experience\n5+ years of experience in Identity & Access Management or directory services engineering\nHands-on experience with ForgeRock OpenIDM and/or OpenDS (or Ping Identity directory products)\nStrong Linux administration skills (RHEL preferred)\nProficiency in scripting languages such as Bash and/or Python for automation and operational tooling\nSolid understanding of LDAP concepts: schema, replication, ACIs, indexing, and directory architecture\nExperience supporting enterprise IAM in a production environment\nExperience designing, implementing, or supporting multi-factor authentication (MFA) solutions, including hardware tokens, YubiKeys, authenticator applications, push notifications, and/or certificate-based authentication.\nFamiliarity with authentication protocols: LDAP, Kerberos, SAML, OAuth2/OIDC\nStrong troubleshooting and root cause analysis skills\nRequires extensive knowledge of relevant IT system issues, techniques, and implications across all existing server platforms.\nMust have extensive knowledge in networking, databases, systems, and/or Web operations.\nDesirable Knowledge and Experience\nKnowledge of ICE business environment and the ability to evaluate implications of changes to IT systems \nExperience with additional ForgeRock/Ping Identity products (AM, PingFederate, PingDirectory)\nFamiliarity with HashiCorp Vault or other secrets management solutions\nExperience with containerization (Docker/Kubernetes) in the context of IAM workloads\nKnowledge of SCIM provisioning standards\nExposure to cloud environments (AWS, Azure, or GCP) and hybrid identity architectures\nForgeRock Certified Identity Professional or equivalent certification\nKnowledge of relevant legal and regulatory requirements \nKnowledge of common Identity Access Management frameworks \nExperience working with a diverse range of data sources/streams and managing these effectively \nExcellent analytical, decision-making, and problem-solving skills \nKnowledge of multiple operating systems and related utilities and hardware \nKnowledge of storage management, TCP/IP, and network monitoring and tools \nStrong background in operations, processes, solutions, and technologies \nStrong understanding of policy, compliance, and best practice Identity Access Management principles \nWorking knowledge of Linux, Windows, and Network Operating Systems \nKnowledge of infrastructure, key processes, and technology-oriented risk issues, specifically around Identity Access Management and privacy \nResults oriented, business focused, and successful at interfacing across multiple organizational units \nProfessional certification such as CISSP, CISM, etc. \nMust-Have Skills\nPingDirectory / PingDS Administration\nExperience with PingDS (formerly ForgeRock Directory Services).\nStrong understanding of enterprise directory services administration and support.\nPingIDM / ForgeRock IDM\nExperience with PingIDM (formerly ForgeRock IDM).\nKnowledge of identity lifecycle management, provisioning, and directory integration.\nProduct Administration Experience\nHands-on administration and operational support of IAM products.\nExperience handling user requests, troubleshooting, and platform support.\nLinux Administration\nStrong Linux administration skills.\nExperience managing distributed environments and troubleshooting Linux-based services.\nImportant because the directory services platform operates across a large server footprint.\nPreferred Skills\nMulti-Factor Authentication (MFA)\nExperience with MFA technologies.\nExposure to WebADM or similar MFA solutions is desirable.\nDirectory Services Expertise\nLDAP concepts, replication, schema management, performance tuning, backups, and troubleshooting.\nEnterprise-scale directory management experience.","description_format":"text","description_chars":8136,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Stock Exchanges & Market Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-24T08:18:53Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.314,"p_room":0.35,"age_days":39,"expected_fill_days":9,"reasons":["conf:3","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/intercontinental-exchange-senior-engineer-identity-and-access-management","json_url":"https://alion.io/job/intercontinental-exchange-senior-engineer-identity-and-access-management.json","meta":{"generated_at":"2026-10-26T23:17:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58612},"rest":"https://alion.io/mcp/rest/get_company?id=58612"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintercontinental-exchange-senior-engineer-identity-and-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintercontinental-exchange-senior-engineer-identity-and-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintercontinental-exchange-senior-engineer-identity-and-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/intercontinental-exchange-senior-engineer-identity-and-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintercontinental-exchange-senior-engineer-identity-and-access-management"}]}