Staff IAM Engineer

As a Staff IAM Engineer at DRW, you own the delivery, operation, and continuous improvement of enterprise authentication and authorization services. You execute implementations, participate in and influence design decisions, and ensure integrations across on-premises and cloud environments meet SLAs and control requirements. The IAM team is a vanguard group building DRW's comprehensive identity capabilities, aligning them to evolving business requirements and emerging identity and security innovations.

What you'll do

• Own, implement, and operate end-to-end enterprise authentication and federation solutions; drive architecture reviews and collaborate to influence design decisions, ensuring security, compliance, availability, and performance.
• Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT-based integrations.
• Integrate identity solutions with enterprise and third-party applications, APIs, SaaS platforms, and custom web and mobile apps, including SSO, provisioning (SCIM/API), and secure API authentication.
• Implement MFA, adaptive authentication, fine-grained access policies, and authorization models that meet security standards.
• Support identity lifecycle and directory integrations with IAM and directory services such as Entra ID, Azure AD, Active Directory, and ADFS, and provisioning systems.
• Troubleshoot authentication and authorization flows; perform root-cause analysis, incident response, and performance tuning.
• Ensure compliance with security, audit, and regulatory requirements and support related assessments.
• Collaborate closely with security, infrastructure, application, and DevOps teams to deliver and operate identity services.
• Create and maintain runbooks, SOPs, operational procedures, and technical documentation.

What you bring

• 5+ years of hands-on experience in Identity and Access Management (IAM) or equivalent.
• Strong hands-on experience implementing and operating commercial identity platforms and enterprise identity services, with Ping AIC and PingFederate preferred, or the ability to implement required features in Ping.
• Deep knowledge of SSO, federation, and authentication and authorization protocols (SAML 2.0, OAuth 2.0, OpenID Connect, JWT).
• Experience integrating with directory and lifecycle systems (Active Directory, LDAP, Azure AD, Entra ID, ADFS) and provisioning (SCIM/API).
• Practical experience with MFA, adaptive authentication, fine-grained authorization, and access policy enforcement.
• Strong troubleshooting skills across authentication flows, certificates, TLS, networking, and related infrastructure.
• Scripting and automation skills (Shell, Python, Go, PowerShell) and familiarity with IaC and CI/CD tools (Terraform, Ansible, or similar).
• Comfort working in Linux environments and producing operational runbooks and technical documentation.
• Strong written and verbal communication, stakeholder management, and cross-team collaboration skills.

Nice to have

• Experience in banking or financial services and regulated enterprise environments.
• Hands-on cloud experience (AWS, Azure, Entra, or GCP) and container platforms (Docker, Kubernetes).
• Experience with API security, OAuth and OIDC for APIs, and zero-trust architectures and use cases.
• Practical experience with CIAM or customer identity projects.
• Ping Identity certifications or other security and identity certifications.
• Observability and monitoring experience for identity services (Prometheus, ELK, Splunk, etc.).

What we offer

• Annual base salary of $150,000 to $200,000 depending on experience, qualifications, and relevant skill set.
• Eligible for an annual discretionary bonus.
• Comprehensive employee benefits including group medical, pharmacy, dental and vision insurance, 401k with discretionary employer match, short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.

About DRW

DRW is a diversified trading firm with over three decades of experience, headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia. The firm trades a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets, and has expanded into real estate, venture capital, and cryptoassets.