Sr. Identity & Access Management Engineer

Aon Corporation•Chicago, IL

4d•Remote

About The Position

Aon Service Corporation seeks a Senior Identity & Access Management Engineer to develop enterprise software. The position is based at Aon’s headquarters in Chicago, Illinois, and may be performed remotely from anywhere in the United States five days a week. The engineer will architect, design, and implement enterprise IAM solutions using SailPoint IdentityNow, including identity lifecycle management, role-based access control (RBAC), and governance controls. The role also leads IAM automation and integrations, supports the IAM platform, and collaborates with Security, HR, DevOps, and Application teams to maintain consistent identity governance across the enterprise.

Requirements

Master’s degree in Computer Science, Information Technology, or a related field.
At least three years of enterprise software development experience.
At least three years of experience architecting, designing, and implementing enterprise IAM solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls.
At least three years of experience configuring and customizing IdentityNow components, including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events.
At least three years of experience developing API-driven integrations using REST, SCIM, and JSON.
At least three years of experience automating IAM tasks using PowerShell, Python, or Java.
At least three years of experience implementing access certification campaigns, SoD policies, and audit/compliance processes.
At least three years of experience troubleshooting identity issues, including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems.
At least three years of experience defining IAM architecture standards, creating technical design documents, and leading IAM modernization and cloud security initiatives.

Responsibilities

Architect, design, and implement enterprise Identity and Access Management solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls.
Lead Joiner–Mover–Leaver (JML) automation and provisioning/de-provisioning workflows, integrating with HR, directory, and cloud systems.
Configure and customize IdentityNow Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events.
Develop API-driven integrations using REST, SCIM, and JSON.
Automate IAM tasks using PowerShell, Python, or Java.
Implement access certification campaigns, Segregation of Duties (SoD) policies, and audit/compliance processes.
Integrate IdentityNow with Active Directory, Azure AD, LDAP, databases, and webservices, and onboard applications to manage account lifecycle.
Troubleshoot identity issues, including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems.
Define IAM architecture standards, create technical design documents, and lead IAM modernization and cloud security initiatives.
Collaborate with Security, HR, DevOps, and Application teams to ensure consistent identity governance across the enterprise.
Provide Tier-3 support, monitor system health, maintain identity hygiene, and optimize IAM platform performance.