Note: The job is a remote job and is open to candidates in USA. Aon Service Corporation seeks a Senior Identity & Access Management Engineer to develop enterprise software and architect, implement, and support IdentityNow IAM solutions. The role leads identity lifecycle automation, integrations, governance and compliance, and IAM modernization initiatives while collaborating with security and business teams.
Responsibilities
- Architect, design, and implement enterprise Identity and Access Management solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls
- Lead Joiner–Mover–Leaver (JML) automation, provisioning/de-provisioning workflows, and integration with HR, directory, and cloud systems
- Configure and customize IdentityNow components including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events
- Develop API-driven integrations using REST, SCIM, and JSON
- Automate IAM tasks using PowerShell/Python/Java
- Implement access certification campaigns, Segregation of Duties (SoD) policies, and audit/compliance processes
- Integrate IdentityNow with Active Directory, Azure AD, LDAP, Databases, and Webservices and onboard applications to manage account lifecycle
- Troubleshoot identity issues including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems
- Define IAM architecture standards, create technical design documents, and lead IAM modernization and cloud security initiatives
- Collaborate with Security, HR, DevOps, and Application teams to ensure consistent identity governance across the enterprise
- Provide Tier-3 support, perform system health monitoring, maintain identity hygiene, and optimize overall IAM platform performance
Skills
- A Master's degree in Computer Science, Information Technology, or a related field
- Three years of enterprise software development experience
- At least three years of experience in each of the following: 1. Architecting, designing, and implementing enterprise Identity and Access Management solutions using SailPoint IdentityNow, including identity lifecycle, RBAC models, and governance controls
- At least three years of experience in each of the following: 2. Configuring and customizing IdentityNow components including Connectors, Workflows, Transforms, Rules, Access Reviews, Identity Profiles, Access Profiles, and Lifecycle Events
- At least three years of experience in each of the following: 3. Developing API-driven integrations using REST, SCIM, and JSON
- At least three years of experience in each of the following: 4. Automating IAM tasks using PowerShell/Python/Java
- At least three years of experience in each of the following: 5. Implementing access certification campaigns, Segregation of Duties (SoD) policies, and audit/compliance processes
- At least three years of experience in each of the following: 6. Troubleshooting identity issues including correlation mismatches, authentication and authorization problems, provisioning failures, connector errors, and aggregation problems
- At least three years of experience in each of the following: 7. Defining IAM architecture standards, creating technical design documents, and leading IAM modernization and cloud security initiatives
Benefits
- For full-time and regular part-time colleagues: a 401(k) savings plan with employer contributions
- For full-time and regular part-time colleagues: an employee stock purchase plan
- For full-time and regular part-time colleagues: consideration for long-term incentive awards at Aon’s discretion
- For full-time and regular part-time colleagues: medical, dental and vision insurance
- For full-time and regular part-time colleagues: various types of leaves of absence
- For full-time and regular part-time colleagues: paid time off, including 12 paid holidays throughout the calendar year and 15 days of paid vacation per year
- For full-time and regular part-time colleagues: paid sick leave as provided under state and local paid sick leave laws
- For full-time and regular part-time colleagues: short-term disability and optional long-term disability
- For full-time and regular part-time colleagues: a health savings account and health care and dependent care reimbursement accounts
- For full-time and regular part-time colleagues: employee and dependent life insurance and supplemental life and AD&D insurance
- For full-time and regular part-time colleagues: optional personal insurance policies
- For full-time and regular part-time colleagues: adoption assistance and tuition assistance
- For full-time and regular part-time colleagues: commuter benefits
- For full-time and regular part-time colleagues: an employee assistance program that includes free counseling sessions
- May telecommute from anywhere in the United States 5 days a week
- Two “Global Wellbeing Days” each year
- Working style solutions and flexibility through Smart Working
- A continuous learning culture that supports learning, sharing, growth, and achieving your fullest potential
Company Overview
Company H1B Sponsorship