Senior IAM Engineer in Mundelein

Join a highly regulated, cloud-first digital assets business where is one of the most critical security controls in the organization. This is a senior individual contributor role with ownership across & Access Management (IAM), Privileged Access Management (PAM), Governance, secrets management, and cryptographic key governance., We are looking for an engineer who enjoys building and automating security controls rather than simply administering access. You will own production platforms, lead the evolution of privileged access controls, drive automation, and partner closely with Security, Infrastructure, and Engineering teams.

• Significant hands-on experience in IAM, Security, or Privileged Access Engineering \n

• Deep experience administering, implementing, or redesigning enterprise PAM solutions such as CyberArk, BeyondTrust, Delinea, Teleport, StrongDM, or similar, * Strong Governance experience using SailPoint, Saviynt, Zilla, or comparable platforms

n \n

• Own the design, implementation, and lifecycle management of enterprise IAM and PAM platforms \n

• Build and automate processes including joiner, mover, leaver workflows, access certifications, credential rotation monitoring, and entitlement reviews \n

• Design least-privilege access models across AWS and Azure environments \n

• Implement and govern privileged access controls including just-in-time access, session management, and privileged account onboarding \n

• Develop integrations between platforms and broader security tooling using APIs, scripting, and Infrastructure as Code \n

• Lead access recertification programs and produce audit-ready evidence for regulatory and compliance reviews \n

• Drive secrets and certificate lifecycle initiatives, including rotation, inventory management, and governance \n

• Partner with Engineering and Platform teams to review , secrets, and access control designs \n

• Own technical vendor relationships, platform roadmaps, and proof-of-concept evaluations \n

• Support incident response and business continuity planning where or cryptographic controls are involved \n

\n

\n