> Markdown version of [/jobs/ext/1067571-iam-engineer-ii](https://www.wearedevelopers.com/jobs/ext/1067571-iam-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer II - **Company:** Tempus Inc - **Location:** Chicago, IL, United States - **Experience:** Expert - **Salary:** $140,000.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Active Directory, Application Programming Interfaces (APIs), Software as a Service, Computer Programming, Domain Name System (DNS), Multi-Factor Authentication, Human Resources Information System (HRIS), Identity and Access Management, Python (Programming Language), Kerberos (Protocol), OAuth, OpenID, Windows PowerShell, Zero Trust Network Access, Security Assertion Markup Language (SAML), User Provisioning Software, Extensible Markup Language (XML), Scripting, Event Processing Language, Okta, System Availability, 3-tier Architectures, Restful APIs, Terraform, Api Management - **Published:** June 9, 2026 - **Apply:** https://www.dice.com/job-detail/a3b87b0e-bfb9-4e99-93aa-24e602f3e602 ## About the Role + Okta Mastery: 5+ years of experience managing Okta at an enterprise scale, including advanced Workflows and Okta Expression Language. + Protocol Expertise: Deep understanding of the "Identity Trinity":SAML 2.0: XML-based assertions and troubleshooting.OIDC/OAuth 2.0: Scopes, claims, and grant types (Authorization Code vs. Client Credentials).SCIM: Automating user provisioning and deprovisioning. + Directory Services: Strong background in Active Directory (Group Policy, Kerberos, DNS) and how it interfaces with modern cloud tenants. + Programming/Scripting: Proficiency in Python, PowerShell, or JavaScript for interacting with APIs and automating repetitive tasks. + Modern Security: Familiarity with Zero Trust Architecture (ZTA) and Least Privilege principles. * Soft Skills + Problem Solver: You don't just fix the symptom; you find the root cause in the protocol trace. + Communicator: Ability to explain complex authentication flows to non-technical stakeholders (e.g., HR or Legal). + Continuous Learner: The identity landscape shifts weekly; you enjoy staying ahead of new standards like FIDO2 or Passkeys. * Bonus Points + Okta Certified Professional/Administrator/Consultant. + Experience with Infrastructure as Code (Terraform) for managing Okta resources. + Experience with Privileged Access Management (PAM) tools. + Experience with Identity Governance and Administration (IGA) tools. ## Description * As a Senior IAM Engineer II, you will be the primary architect and guardian of our identity perimeter. You will design, implement, and maintain scalable identity solutions that secure our workforce. Your focus will be on transitioning away from manual provisioning toward a fully automated "Identity-as-Code" model using Okta Workflows and API integrations., + Architectural Leadership: Design and scale our Okta tenant, ensuring high availability and global best practices for SAML, OIDC, and OAuth 2.0 integrations. + Automation & Orchestration: Build complex lifecycle management (LCM) flows using Okta Workflows to automate joiner/mover/leaver processes across HRIS, AD, and downstream SaaS apps. + Hybrid Identity Management: Manage and optimize the synchronization between Active Directory (AD) and cloud identity providers. + API Integration: Develop custom integrations using REST APIs to connect homegrown or niche applications that lack out-of-the-box support. + Security & Compliance: Implement Adaptive Multi-Factor Authentication (MFA), Passwordless strategies, and regular access certifications to meet SOC2/ISO 27001/SOX requirements. + Escalation Support: Serve as the Tier 3 expert for complex authentication issues and identity-related security incidents. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)