Senior IT Security Engineer (Identity & Customer Access Management)

BITCO Insurance Companies•Davenport, IA

1d•Hybrid

About The Position

Old Republic Bitco is seeking a Senior IT Security Engineer focused on Identity and Customer Access Management to join its home office in Davenport, Iowa. The position is open to a hybrid work arrangement. As part of the Cybersecurity team, the engineer will mature the organization’s Identity and Customer Identity and Access Management (IAM/CIAM) capabilities while supporting cybersecurity and regulatory objectives. The role strengthens identity security through access policies, role definitions, provisioning and deprovisioning, access reviews, authentication and authorization controls, monitoring, and audit evidence. The engineer resolves complex access and identity issues, analyzes security and compliance requirements, and implements and monitors controls supporting the cybersecurity framework and risk management objectives. The work applies principles aligned with the NIST Cybersecurity Framework and applicable regulations, including the New York Department of Financial Services Cybersecurity Regulation. The position partners with Cybersecurity, IT, Internal Audit, business stakeholders, and external auditors to design, implement, document, monitor, and evidence identity and security controls. It supports audits, control-gap identification and remediation, role-based access improvements, and sustainable IAM/CIAM processes. This elevated technical role will help shape the future state of IAM/CIAM, balancing security, regulatory requirements, operational efficiency, and customer experience. It also provides technical guidance and customer service while troubleshooting access issues and ensuring users have appropriate access to perform their roles securely and effectively.

Requirements

Bachelor’s degree in Information Technology, Computer Science, Business Information Systems, or a related field; equivalent work experience and relevant certifications may be considered.
At least four years of experience supporting enterprise technology environments in Service Desk, Client Services, Technical Support, or IT Operations; insurance or financial services experience is preferred.
Demonstrated experience supporting business applications, enterprise software platforms, and employee technology services in a complex business environment.
Proven experience troubleshooting endpoint technologies, operating systems, collaboration platforms, Microsoft 365 technologies, mobile devices, business applications, and workplace technologies.
Experience supporting IAM solutions, including Active Directory, Microsoft Entra ID, Intune, MDM platforms, and enterprise authentication technologies.
Ability to independently prioritize workload and manage multiple concurrent requests.
At least 4–7 years of experience in IAM/CIAM technology and access governance.
Hands-on experience with IAM/CIAM platforms such as Microsoft Azure Active Directory, One Identity Manager, or similar.
Experience in organizations undergoing large modernization changes, legacy or technical-debt retirement, and SaaS platform implementations such as Duck Creek, Kalepa, SNOW, SFDC, or EDW.
Familiarity with IT security risk and mitigation strategies, security frameworks, regulatory guidelines, security logging and monitoring, monitoring tools, controls, best practices, security protocols, operating systems, networks, security fundamentals, and threats.
Familiarity with identity technologies including Microsoft Entra ID (Azure AD), SailPoint, One Identity, Saviynt or equivalent, Active Directory, SCIM, SAML, OAuth 2.0, OIDC, and LDAP.
Familiarity with Zero Trust architecture, PAM, RBAC and ABAC, IGA, authentication and federation, cloud security, Azure, AWS, and SaaS identity integration.
Ability to manage multiple priorities and projects.
Critical-thinking and problem-solving skills.
Excellent oral and written communication skills.

Nice To Haves

Insurance or financial services experience.
A bachelor’s degree in Computer Science, Information Systems, or Business Administration with Technology as a core component is preferred; the posting also lists this as a preferred qualification in addition to its degree qualification.
Certificates pertaining to IAM/CIAM and access controls, or related work experience.
Preferred certifications: CISSP, Security+, SC-300 (Microsoft Identity and Access Administrator), SC-100 (Microsoft Cybersecurity Architect), Certified Identity and Access Manager (CIAM), and SailPoint certifications.

Responsibilities

Review, modify, and administer identity lifecycle processes to ensure timely and accurate provisioning and deprovisioning of user accounts and access rights.
Collaborate with cross-functional teams to integrate IAM/CIAM solutions with enterprise applications, directories, and infrastructure components.
Facilitate regular access reviews and audits to ensure compliance with regulatory requirements and internal security policies.
Conduct identity risk assessments and evaluate business impacts related to user, privileged, and customer access, aligning controls with least-privilege and Zero Trust principles.
Implement and mature role-based and attribute-based access control models (RBAC/ABAC) across enterprise platforms.
Maintain understanding of business processes to support enterprise identity and access requirements.
Troubleshoot IAM/CIAM issues, investigate root causes, and implement corrective actions to maintain system availability and integrity.
Develop and maintain IAM/CIAM operations documentation, procedures, and guidelines.
Provide IAM/CIAM technical guidance and mentorship to Operations team members.
Facilitate IAM/CIAM functionality discussions with customers to improve awareness of current roles and access definitions.
Work with business stakeholders, application owners, and product teams to define, document, and maintain access models, entitlement structures, and role definitions.
Work directly with application and systems owners to define and document application integration requirements with Organizational Information Management.
Lead evaluation, selection, implementation, and continuous improvement of IAM, CIAM, PAM, authentication, and access governance technologies.
Maintain expertise in security technologies, regulatory requirements, and industry best practices to ensure the ongoing effectiveness of IAM controls.
Recommend and review changes to internal security practices and documentation; implement or streamline practices and procedures as needed, update them, facilitate management review, and support company adoption.
Participate in and maintain scheduled and unscheduled audits of IT security practices and procedures; maintain records of results and own reporting and closure of unresolved audit findings with IT and Business management.
Support modern authentication controls, including MFA, passwordless authentication, federation, SSO, conditional access, identity proofing, and account recovery processes.
Perform other duties as assigned.

Benefits

Competitive salary paired with a comprehensive benefits package.
Generous paid time off and 12 paid holidays annually.
Medical, dental, and vision coverage.
Accident, critical illness, and hospital indemnity insurance.
Company-paid life insurance equal to 2× annual salary.
Company-paid short-term and long-term disability coverage.
401(k) Savings and Profit-Sharing Plan through Old Republic.
Ongoing education, training, and professional development opportunities.
Financial assistance for industry certifications and insurance designations.
Opportunities to participate in corporate philanthropy and community service initiatives.
Optional travel, commuter, and pet insurance.
Employee wellness support through a dedicated fitness program.