Security Engineer - IAM

IAM Staff Engineer, Weekend Trading Support Systems

We are building a new, high-impact team dedicated to supporting our exciting new weekend trading capabilities. We are seeking an experienced and highly resilient IAM Staff Engineer whose primary focus will be providing expert, hands‑on support, troubleshooting, and recovery for our mission‑critical Identity and Access Management (IAM) systems. While project work exists, your core mission is ensuring the stability and high availability of the production environment.

• Initial Training Schedule (First 3-6 months):
  Until the selected candidate is fully up to speed on our specific technologies and environment, the work schedule will be Monday‑Friday business hours, working alongside existing IAM engineers for training and ramp‑up.
• Target Shift
  
  Schedule:
  
  After the initial training period, this role will transition to a compressed work schedule, requiring four (4) eleven‑hour shifts per week (10 working hours plus 1 hour for lunch) to cover weekend support.
• Office Requirement:
  This position requires a minimum 2‑day per week in‑office presence. Candidates must be within commutable distance of a CME Group Belfast office.

You will be the go‑to for operational excellence and advanced issue resolution for our core IAM platforms. Furthermore, you will be supported and backed up by a team of highly skilled engineers located globally who can bring additional knowledge and experience when required.

• Provide advanced, hands‑on troubleshooting, problem isolation, and rapid system recovery for critical IAM systems and related components.
• Lend timely support assistance for major incidents, participating in post‑mortem analysis and implementing preventive measures.
• Take part in product upgrades depending on the situation and scope of the project, ensuring operational readiness.
• Perform in the on‑call rotation and disaster recovery tests.
• Assist in our continuous improvement efforts to reduce repeated support calls and incidents.

• Support the maintenance of highly automated and reliable directory solutions.
• Proactively identify and automate existing manual tasks and processes to improve efficiency and stability.
• Research and implement security best practices across all supported platforms.
• Assist teams in identifying, safely storing, and retrieving their secrets in line with industry best practice and CME Standards.

• Deliver directory solutions that enhance security and compliance.
• Develop processes, guidelines, and robust documentation for consumption by internal teams.
• Aiding information gathering for audits and overseeing documentation efforts.

• Experience:
  
  5 – 7 years of application support and experience with IAM services, tools, and solutions.
• Core Systems:
  Proven, hands‑on experience designing, deploying, and supporting large‑scale enterprise IAM solutions, specifically including:
  • Cloud SSO and CIAM Platforms
  • LDAP Directories & Active Directory
  • Privileged Access Management platforms
  • MFA solutions
  • Familiarity with hardware security keys
• Cloud Acumen:
  Experience with cloud computing strategies, concepts, and technologies, particularly with Google Cloud Platform (GCP) IAM primitives (e.g., Service Accounts, IAM Roles, Identity Platform).
• Containerization/Orchestration:
  Knowledge of container technologies, especially Kubernetes, as they relate to secrets management and identity access.
• IAM Foundation:
  Strong familiarity with the following areas is essential, as this is the primary scope of the role:
  • Privileged Access Management
  • Identity Lifecycle Management
  • Access Management (Federation/MFA/SSO)
• Scripting/Automation:
  Some development experience in one or more of the following:
  Shell Scripting, Power Shell, Python, Chef & Terraform.
• Security:
  Must have a thorough knowledge of information security components, principles, practices, and procedures, particularly regarding IAM security systems and controls.

• Troubleshooting Focus:
  Strong analytical,…