Identity and Access Management Engineer (Authentication)

Summary

Aon is a global organization focused on helping people and businesses make better decisions. The IAM Engineer will design, implement, and support authentication capabilities, including SSO and MFA, while partnering with technology and business stakeholders to strengthen security and improve user experience.

Responsibilities

• Design, integrate, test, and support Identity and Access Management (IAM) authentication solutions, with a focus on Single Sign-On (SSO) and Multi-Factor Authentication (MFA)
• Partner with technology, security, and business stakeholders to understand authentication needs, recommend appropriate IAM patterns, and guide solution implementation
• Configure and maintain authentication platforms such as Okta and Microsoft Entra, including policies, workflows, and integrations
• Help ensure authentication platforms remain secure, reliable, current, and well supported through effective monitoring, maintenance, and patching
• Design and refine SSO and MFA policies and controls that strengthen security while supporting a seamless user experience
• Develop and extend identity-platform capabilities using REST APIs, JSON, and customizable settings
• Analyze authentication and authorization logs to diagnose issues, identify root causes, and implement effective solutions
• Create clear IAM documentation, architecture diagrams, and process flows that support solution design and ongoing operations
• Identify opportunities to improve authentication controls, processes, and platform capabilities while balancing security, reliability, and user experience

Skills

• Professional experience designing, implementing, or supporting IAM solutions
• Experience implementing and integrating SSO and MFA technologies for workforce and/or external user environments, including platforms such as Okta or Microsoft Entra
• Working knowledge of identity and authentication standards and protocols such as SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, and Kerberos
• Experience analyzing authentication and authorization logs and troubleshooting complex identity issues
• Working experience with REST APIs and JSON
• Familiarity with applicable security and compliance frameworks, such as GDPR, SOX, ISO 27001, and SOC 2
• Analytical and problem-solving skills with the ability to identify root causes and develop practical solutions
• Clear written and verbal communication skills, including the ability to explain technical concepts to varied audiences
• Ability to collaborate across technology and business teams, manage competing priorities, and contribute effectively in a team environment
• Ability to create clear technical documentation, diagrams, and process flows
• 3 + years of relevant professional experience designing and implementing IAM solutions, including experience with SSO and MFA technologies
• Equivalent combinations of relevant experience, skills, and education may also be considered
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant industry experience

Qualifications

Must Haves

• Professional experience designing, implementing, or supporting IAM solutions
• Experience implementing and integrating SSO and MFA technologies for workforce and/or external user environments, including platforms such as Okta or Microsoft Entra
• Working knowledge of identity and authentication standards and protocols such as SAML, OAuth/OIDC, SCIM, LDAP, RADIUS, and Kerberos
• Experience analyzing authentication and authorization logs and troubleshooting complex identity issues
• Working experience with REST APIs and JSON
• Familiarity with applicable security and compliance frameworks, such as GDPR, SOX, ISO 27001, and SOC 2
• Analytical and problem-solving skills with the ability to identify root causes and develop practical solutions
• Clear written and verbal communication skills, including the ability to explain technical concepts to varied audiences
• Ability to collaborate across technology and business teams, manage competing priorities, and contribute effectively in a team environment
• Ability to create clear technical documentation, diagrams, and process flows
• 3 + years of relevant professional experience designing and implementing IAM solutions, including experience with SSO and MFA technologies
• Equivalent combinations of relevant experience, skills, and education may also be considered
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant industry experience

Benefits

• A 401(k) savings plan with employer contributions
• An employee stock purchase plan
• Consideration for long-term incentive awards at Aon’s discretion
• Medical, dental and vision insurance
• Various types of leaves of absence
• Paid time off, including 12 paid holidays throughout the calendar year
• 15 days of paid vacation per year
• Paid sick leave as provided under state and local paid sick leave laws
• Short-term disability and optional long-term disability
• Health savings account
• Health care and dependent care reimbursement accounts
• Employee and dependent life insurance and supplemental life and AD&D insurance
• Optional personal insurance policies
• Adoption assistance
• Tuition assistance
• Commuter benefits
• An employee assistance program that includes free counseling sessions