Sr. Identity & Access Management Engineer

Your Job

We have an exciting opportunity to hire a Senior Identity and Access Management (IAM) Engineer to join our already skilled engineering team. This individual will be a part of a global team that manages authentication and identity tools and procedures for Koch Industries. Working closely with global colleagues, as well as customers, will provide significant global exposure.

The Koch Technology Identity team provides modern Identity solutions and services for all Koch businesses. We are responsible for the entire enterprise in designing innovative services, creating, and sharing best practices, and providing support for our services.

This role is not eligible for VISA sponsorship

• Design and implement authentication and authorization solutions using SAML, OAuth2, and OIDC.
• Build modern SSO and federation integrations for enterprise and cloud applications.
• Provide on‑call and operational support for key Identity Services.
• Engineer passwordless and risk‑based authentication.
• Engineer and operate enterprise IAM platforms.
• Lead onboarding and integration of business application.
• Support M&A identity integrations and migrations.
• Develop automation for provisioning, workflows, and lifecycle management.
• Deliver infrastructure and configurations through CI/CD pipelines.
• Design identity solutions in cloud environments such as Amazon Web Services and Microsoft Azure.
• Automate infrastructure using Terraform/Ansible.
• Apply monitoring, logging, and SRE practices to ensure reliability.
• Partner with architects, developers, and security teams globally.

• Practical experience implementing and troubleshooting SAML, OpenID Connect (OIDC)/OAuth
  2.
• Hands‑on administration and integration experience with enterprise IdPs.
• Operational experience for identity platforms including monitoring, high availability, backups/DR, incident response.
• Experience with identity governance (access certification, segregation‑of‑duties).
• Experience designing and implementing cloud IAM and cloud‑native identity automation.
• Proficiency with Infrastructure‑as‑Code, scripting/programming, and building CI/CD pipelines for identity configuration and policy deployments.

• Experience implementing MFA and risk‑based adaptive authentication.
• Experience managing PKI/TLS certificate life cycles and secure secrets handling.
• Experience developing automated tests for authentication/authorization flows and conducting load/performance testing.
• Experience in User journey orchestration for Workforce, CIAM or third‑party identities.
• Experience utilizing AI Frameworks to help automate process solutions.

Equal Opportunity Employer, including disability and protected veteran status. Except where prohibited by state law, some offers of employment are conditioned upon successfully passing a drug test. This employer uses E‑Verify. Please  for additional information. (For Illinois E‑Verify information , aquí, or tu).