Security Engineer - IAM

Position: Staff Security Engineer - IAM
We are building a new, high-impact team dedicated to supporting our new weekend trading capabilities. We are seeking an experienced and highly-capable IAM Staff Engineer whose primary focus will be providing expert, hands-on support, troubleshooting, and recovery for our mission-critical Identity and Access Management (IAM) systems. While project work exists, your core mission is ensuring the stability and high availability of the production environment.
** Work Environment & Schedule
*** Initial training schedule (first 3-6 months):
Until the candidate is fully up to speed on our specific technologies and environment, the work schedule will be Monday - Friday business hours, working alongside existing IAM engineers for training and acclimation to our technology and processes.
* Target shift schedule:
After the initial training period, this role will transition to a compressed work schedule, requiring four (4) eleven-hour shifts per week (10 working hours plus 1 hour for lunch) to cover weekend support.
* Office requirement:
This position requires a minimum 2-day per week in-office presence. Candidates must be within commutable distance of a CME Group Chicago office.
** What You'll Do (Primary Focus: Support & Operations)
** You will be the go-to for operational support and advanced issue resolution for our core IAM platforms. Furthermore, you will be supported and backed up by a team of highly skilled engineers located globally who can bring additional knowledge and experience when required.
** Support & System Recovery
*** Provide advanced, hands-on troubleshooting, problem isolation, and rapid system recovery for critical IAM systems and related components.
* Lend timely support assistance for major incidents, participating in post-mortem analysis and implementing preventative measures.
* Take part in product upgrades depending on the situation and scope of the project, ensuring operational readiness.
* Perform in the on-call rotation and disaster recovery tests.
* Assist in our continuous improvement efforts to reduce repeated support calls and incidents.
* Participate in our continuous improvement efforts to reduce repeated support calls and incidents.
** Engineering & Automation
*** Proactively identify and automate existing manual tasks and processes to improve efficiency and stability.
* Research and implement security best practices across all supported platforms.
* Assist teams in identifying, safely storing, and retrieving their secrets in line with industry best practice and CME Standards.
** Compliance & Documentation
*** Develop processes, guidelines, and robust documentation for consumption by internal teams.
* Aiding information gathering for audits and overseeing documentation efforts.
** What You'll Bring (Minimum Requirements)
** Technical Knowledge &

Experience:

* ** Experience**: 5 - 7 years of application support and experience with IAM services, tools, and solutions.
* ** Core systems**:
Proven, hands-on experience designing, deploying, and supporting large-scale enterprise IAM solutions, specifically including:  + Cloud SSO and CIAM Platforms  + LDAP Directories & Active Directory  + Privileged Access Management platforms  + MFA solutions  + Familiarity with hardware security keys
* ** Cloud acumen**:

Experience with cloud computing strategies, concepts, and technologies, particularly with Google Cloud Platform (GCP) IAM primitives (e.g., Service Accounts, IAM Roles, Identity Platform).
* ** Containerization / orchestration**:
Knowledge of container technologies, especially Kubernetes, as they relate to secrets management and identity access.
* I
* * AM foundation**:
Strong familiarity with the following areas is essential, as this is the primary scope of the role:  + Privileged Access Management  + Identity Lifecycle Management  + Access Management (Federation / MFA / SSO)
* ** Scripting / automation**:
Some development experience in one or more of the following:
Linux shell scripting, Power Shell, Python, Chef & Terraform.
* ** Security**:
Must have a thorough knowledge of information security components, principles, practices, and procedures, particularly regarding IAM security systems and controls.
* ** Technical support**:
Experience as an individual contributor on support and technical discussions in high-pressure situations.
** Professional Skills**
* ** Troubleshooting focus**:
Strong analytical, problem-solving, and expert-level troubleshooting skills with high-level critical thinking.
* ** Communication**:
Ability to succinctly articulate complex technical issues to both technicians and business sponsors.
* ** Governance**:
Solid working knowledge of ITIL (problem and incident management) and applicable change and audit controls.
* ** Collaboration**:
Ability to work both independently and in a team-oriented environment with the ability to establish relationships with external vendors.
** Education & Certification**
* ** Formal education**: A Bachelor's degree in Computer Science, Information Systems or…