Senior IAM Engineer at Federal Home… · Chicago

At the Federal Home Loan Bank of Chicago, employees come first - that’s why we offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees.

• Collaborative, in-office operating model

• Retirement program (401k and Pension)

• Medical, dental and vision insurance

• Lifestyle Spending Account

• Competitive PTO plan

• 11 paid holidays per year

​

Who we are

Our mission at FHLBank Chicago: To partner with our members in Illinois and Wisconsin to provide them competitively priced funding, a reasonable return on their investment, and support for their community investment activities.

Simply said, we're a bank for banks and other financial institutions, focused on being a strategic partner for our members and working together to reinvest in our communities, from urban centers to rural areas. Created by Congress in 1932, FHLBank Chicago is one of 11 Federal Home Loan Banks, government sponsored in support of mortgage lending and community investment.

What it’s like to work here

At FHLBank Chicago, we bring people together. We are committed to a high performing, engaged workforce, and to supporting the communities we serve across Illinois and Wisconsin. Our Buddy Program pairs new hires with tenured employees to guide their onboarding. Our professional development and training opportunities through upskilling, mentorship programs, and tuition reimbursement allow employees to grow their career with us. Our collaborative, in-office operating model brings teams together to foster innovation, connection, and shared success. To support balance and flexibility, employees are provided an allocation of remote days to use as needed throughout the year.

What you'll do:

As a Sr. IAM Engineer, you will be responsible for implementing IAM product enhancements and providing the ongoing support needed to maintain secure controls. You will be asked to focus on meeting the steady delivery of the bank’s IAM initiatives while implementing reliable services. You will be expected to provide hands-on expertise with evaluating, developing, and implementing world class IAM solutions that follow industry’s best practices. Your daily responsibilities will include providing technically sound IAM solutions that are in direct support with the bank’s business needs while further aligned with the overall IAM strategic and objectives. The Sr. IAM Engineer role is also responsible for supporting application integrations and continuous onboarding on new systems. You would be responsible for collaborating with Application Owners and IT Support teams with the expansion of IAM automation.

How you'll make an impact:

• Develop and mature IAM solutions that protect assets from unauthorized access
• Build IAM automation and solutions that aid in the delivery and expectation in supporting the bank
• Partner and be available to your peers in direct support of the Bank's organizational goals

What you can expect:

• Implementing critical enhancements and bug fixes as part of a mature product management lifecycle.
• Producing and validating accurate IAM reporting that will be included in Monthly Statistics and shared with Compliance and Senior Leadership.
• Implementation of 3rd party applications using automation technics to establish appropriate authorization controls.
• Working directly with other developers as well as Application Owners, Project and Delivery Teams, in the delivery of application integrations with IAM solutions while developing comprehensive Role and Access design patterns.
• Defining and maintaining build procedures that supports ongoing Consistency Checks/Completeness expectations. This would include Accuracy Checks for manually provisioned applications and other high-risk labeled systems.
• Fulfillment of Audit inquiries that may include data queries, user lists, evidence collection, meetings and walkthroughs.
• Working with other IT teams in the design, development, and implementation of IAM solutions as an SME in the IAM space.
• Providing direct support for ongoing product development, testing, and knowledge transfer of production ready solutions.
• Providing technical assistance to Security Operations team in the day-to-day management of IAM solutions.
• Mentoring and providing technical assistance to junior team members for continuous development of internal talent.
• Demonstrating strong troubleshooting and problem-solving skills
• Implementing IAM solutions that leverage load balancers, clustering, high availability, and disaster recovery technologies.
• Awareness and implementation expertise involving certificate management, SSL handshaking, and encryption technologies while integrating with IAM solutions.
• Documenting and updating operating procedures to assist with knowledge transfer.
• Help identify operational issues while recommending and implementing IAM solutions that meet team’s strategic direction.

What you'll bring:

• Bachelor's Degree
• Strong understanding of SDLC Methodologies and direct CI/CD pipeline and methodology expertise.
• CIAM, MS Certified IAM Admin or other Information Security related certifications.
• Must have working knowledge at a protocol level across IAM domains such as SSO, MFA, IGA, Password Management, and Privileged Access Management.
• Must have 4-7 Years engineering experience with core Identity products to include Active Directory, Azure Entra, OIM IGA, and CyberArk.
• Experience using time management skills such as prioritizing/organizing and tracking details to meet deadlines across multiple projects that may have various completion dates.
• Microsoft Office Suite, Azure DevOps.
• Exposure to Java, J2EE, Perl Scripts.
• Experience with PowerShell.
• Expertise in developing and implementing product enhancements to further mature an existing IAM program.
• Ability to support direct system integration experience that includes Workday, ServiceNow, PAM, ActiveRoles, AD, and Entra.
• Industry experience in establishing reliable IAM governance in support of enhanced JML and role mining technics.
• Direct experience in OneIdentity application onboarding and support of enterprise applications with automated provisioning requirements.

The Perks

At FHLBank Chicago, we believe in rewarding our high performing workforce. We offer a highly competitive compensation and bonus package, and access to a comprehensive benefits program designed to meet the needs of our employees. Our retirement program includes a 401(k) and pension plan. Our wellbeing program supports employees at work and in their personal lives: Our PTO plan provides five weeks of vacation for new employees and 11 paid holidays per year; our Lifestyle Spending Account provides an annual stipend for employees to support wellbeing activities; and our central downtown location at the Old Post Office provides easy access to public transportation and breathtaking views from our award-winning rooftop. Visit FHLBCbenefits.com for additional details about our benefits. Step into a brighter future with us.

Salary Range:

$90,400.00 - $150,700.00

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors. In addition to the base salary, we offer a comprehensive benefits package which can be found here: https://hrportal.ehr.com/fhlbc