Назад
Company hidden
обновлено 14 дней назад

Lead IAM Architect (IAM)

150 000 - 200 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US/Europe/Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead IAM Architect (IAM): Designing and leading the modernization of DRW’s identity infrastructure by decoupling AuthN from AuthZ and integrating commercial IdPs with proprietary trading systems, with an accent on zero-trust token exchange, machine identities, and legacy migration. Focus on building migration architectures, pressure-testing IdP and IGA tools, developing IaC and integration code, and translating security and compliance requirements into resilient enterprise identity solutions.

Location: Chicago, United States

Annual base salary: $150,000–$200,000, plus an annual discretionary bonus.

Company

hirify.global is a diversified trading firm using proprietary capital and technology across global financial markets and non-traditional strategies including real estate, venture capital, and cryptoassets.

What you will do

  • Design and own the migration architecture from organically grown identity solutions to a modern enterprise IdP.
  • Write code, configure APIs, and build proof-of-concept integrations for identity modernization.
  • Lead vendor evaluations by testing commercial IdP and IGA tools against complex internal infrastructure and messy data.
  • Design zero-trust token exchange for internal APIs and microservices, including secure governance of non-human identities.
  • Translate regulatory and security risks into pragmatic engineering requirements while coordinating security, compliance, business, and engineering stakeholders.
  • Integrate the enterprise IdP with custom-built internal applications and legacy systems.

Requirements

  • Deep architectural expertise in OIDC, OAuth 2.0, SAML, JWT, JWKS, RS256, and applied cryptography.
  • Software or systems engineering experience, strong IaC proficiency, and programming ability in Go and/or Python.
  • Experience with HashiCorp Vault, AWS IAM Roles, OIDC federation for CI/CD pipelines, and ephemeral certificate brokering.
  • Strong stakeholder management skills, including vendor evaluation, architectural negotiation, and communication with executive business stakeholders.
  • Experience untangling legacy technical debt and using Identity-Aware Proxies as last-mile migration adapters.
  • Strong system design skills and the ability to connect identity solutions with regulatory and compliance requirements.

Culture & Benefits

  • High-expectations environment focused on integrity, innovation, curiosity, and challenging consensus.
  • Autonomy and the ability to pivot quickly in a high-speed trading culture.
  • Medical, pharmacy, dental, and vision insurance.
  • 401(k) with discretionary employer match, disability coverage, life and AD&D insurance.
  • Health savings accounts and flexible spending accounts.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →