Senior Identity Engineer

I'm working with a world-leading financial services organisation, known across the industry for hiring strong technologists, maintaining a high technical bar and retaining its people through complex and unique technical challenges, alongside strong long-term compensation growth.They're now building a brand-new Identity Engineering team in Chicago and are open on level, from experienced engineers through to more senior/staff-level hires.You'll be helping to build, implement and operate the firm's authentication and authorization services, working across SSO, federation, MFA, identity integrations and secure access across both on-prem and cloud environments. You'll work closely with security, infrastructure and engineering teams, integrating identity across applications, APIs and internal platforms, while also helping influence the architecture and direction of a completely new IAM function.This sits firmly on the engineering side of IAM. We're looking for experience across authentication and authorization, SSO and federation, with technologies and protocols such as OAuth 2.0, OIDC, SAML, MFA, SCIM, Active Directory/Entra ID and LDAP.Experience with Ping Identity / PingFederate would be particularly valuable, alongside broader engineering skills across Linux, APIs, Python/Go/Java/PowerShell, Terraform, CI/CD, cloud or Kubernetes.You don't need to tick every box. The important thing is strong identity fundamentals, hands-on engineering ability and an interest in building rather than simply maintaining an established IAM environment.Location: Chicago, hybrid.If you're an Identity Engineer interested in joining a new team from the beginning and helping shape its technical direction, get in touch.