Staff IAM Engineer

<p><strong>DRW</strong> is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.</p>

<p>Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.</p>

<p>We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. <strong>DRW</strong> is a place of high expectations, integrity, innovation and a willingness to challenge consensus.<span data-ccp-props="{}"></span></p>

<p><strong><span data-contrast="auto">The Team:</span></strong><span data-ccp-props="{}"> </span></p>

<p><span data-contrast="auto">The IAM Team is a net-new, vanguard group that will own, implement, and drive DRW’s comprehensive identity capabilities, aligning them to evolving business requirements. This dedicated group collaborates with stakeholders to advance agentic identity, enhanced authentication and authorization controls, and other emerging identity and security innovations, with potential expansion into customer identity and access management (CIAM).</span><span data-ccp-props="{}"> </span></p>

<p><strong><span data-contrast="auto">The Role:</span></strong><span data-ccp-props="{}"> </span></p>

<p><span data-contrast="auto">We are seeking an experienced Identity Engineer to own the delivery, operation, and continuous improvement of our enterprise authentication and authorization services. The IAM team is responsible for the security, compliance, availability, and user experience of these services; you'll execute implementations, participate in and influence design decisions, and ensure integrations across on</span>‑<span data-contrast="auto">prem and cloud environments meet SLAs and control requirements. The role focuses on SSO, federation, MFA, and secure access management.</span><span data-ccp-props="{}"> </span></p>

<p><strong><span data-contrast="auto">Key Responsibilities:</span></strong><span data-ccp-props="{}"> </span></p>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Own, implement, and operate end-to-end enterprise authentication and federation solutions; </span><span data-contrast="auto">drive architecture reviews and collaborate to influence design decisions</span><span data-contrast="auto">, ensuring security, compliance, availability, and performance.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Implement, configure, and support SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and JWT</span>‑<span data-contrast="auto">based integrations.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Integrate identity solutions with enterprise, third</span>‑<span data-contrast="auto">party applications, APIs, SaaS platforms, and custom web/mobile apps, including SSO, provisioning (SCIM/API), and secure API authentication.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Implement MFA, adaptive authentication, fine</span>‑<span data-contrast="auto">grained access policies, and authorization models that meet security standards.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">Support identity lifecycle and directory integrations with IAM and directory services (e.g., Entra ID/Azure AD, Active Directory, ADFS) and provisioning systems.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Troubleshoot authentication/authorization flows; perform root</span>‑<span data-contrast="auto">cause analysis, incident response, and performance tuning.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="auto">Ensure compliance with security, audit, and regulatory requirements and support related assessments.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="auto">Collaborate closely with security, infrastructure, application, and DevOps teams to deliver and operate identity services.</span><span data-ccp-props="{}"> </span></li>

</ul>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="auto">Create and maintain runbooks, SOPs, operational procedures, and technical documentation.</span><span data-ccp-props="{}"> </span></li>

</ul>

<p><strong><span data-contrast="auto">Required Qualifications:</span></strong><span data-ccp-props="{}"> </span></p>

<ul>

<li data-leveltext="" data-font="Symbol" data-listid="18" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-p