Senior Identity and Access Management Engineer - CIAM

Wintrust is a financial holding company with approximately $50 billion assets under management and traded on the NASDAQ:WTFC. Built on the "HAVE IT ALL" model, Wintrust offers sophisticated technology and resources of a large bank while focusing on providing service-based community banking to each and every customer. Wintrust operates fifteen community bank subsidiaries with over 170 banking locations in the greater Chicago and southern Wisconsin market areas. Additionally, Wintrust operates various non-bank business units including commercial and life insurance premium financing, short-term accounts receivable financing, out-sourced administrative services, mortgage origination and purchase, wealth management services and qualified intermediary services for tax-deferred exchanges.
Why join us?

• An award-winning culture! We are rated a Top Workplace by the Chicago Tribune (past 8 years) and Employee Recommended award by the Globe & Mail (past 6 years)
• Competitive pay and discretionary or incentive bonus eligible
• Comprehensive benefit package including medical, dental, vision, life, a 401k plan with a generous company match and tuition reimbursement to name a few
• Promote from within culture

Why join this team?

• We hold ourselves accountable
• We hold ourselves to high standards
• We share wins
• We operate ethically
• We have fun

Position Overview
The Senior Identity and Access Management Engineer will play a key role in building upon Wintrust's current IAM program and future Client strategy. The role will lead in the design and implementation of Wintrust's cloud Customer and Identity and Access Management (CIAM) security program. The position provides a unique opportunity to influence the organizations broader long-term IAM strategy.
Areas of Responsibility and Accountability

• SR IAM Systems Engineer must have experience in defining Identity & Access Management platform requirements, designing technical solutions and executing on those designs into a highly available, fault tolerant environment.
• Understanding of security best practices, administration and governance of Identity and Access Management the products and services including identify and evaluate security gaps.
• Excellent communications skills, both written and oral are a requirement for this position.
• Will be responsible for day to day management of Identity & Access Management platforms to ensure it is functioning as designed.
• Working with various technical teams to ensure we maintain high availability and uninterrupted outage of our production environment.
• Demonstrate ability to stay current with all industry trends/best practices, as well as new product releases so that we can maintain a proactive 3-year systems management roadmap.
• Ensure at all times all proper documentation is maintained for all aspects of the Identity & Access Management platform
• Lead the adoption of the Identity and Access strategy through the documentation of business capability and roadmap developed with architecture.
• Ensure all third-party monitoring solutions that are integrated into the Identity & Access Management products are properly documented and function as designed.
• Continually work towards optimizing automation and self-service Identity and Access Management capabilities.

Qualifications

• Bachelor's degree or equivalent experience.
• 5 years of progressive hands-on experience in engineering and administration of Identity and Access Management solutions, SailPoint, Okta, and Azure a plus.
• Experience in administration of user and role provisioning, connectors, workflow, certificate management, session management, and encryption technologies
• Strong analytical and problem-solving skills and demonstrable ability to work independently as well as in a team environment
• Experience in building and maintaining Development, QA and Product and Disaster Recovery environments
• Well versed in J2EE, Service Oriented Architecture (SOA), Web Services, LDAP, XML and SAML
• Knowledge in Federation, SAML, OpenID, OAuth and other industry standard authentication / authorization solutions
• Experience programming using the following languages is required: Java/JavaScript, .NET Scripting: PowerShell, VBScript, Perl, Protocols: SQL, LDAP, XML, XSLT, SSL o Web Protocols: HTTPs, HTML, WSDL, SOAP o SSO: SAML 2.0

From our first day in business, Wintrust has been proud to serve a variety of unique communities and people from all walks of life. To be Chicago's Bank® and Wisconsin's Bank®, we need to reflect that diversity both in all the communities we serve, the people we employ, the organizations we work with, and our banking and lending practices. Wintrust Financial Corporation, including community banking and financial services subsidiaries, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity and expressions, genetic information, marital status, age, disability, or status as a covered veteran or any other characteristic protected by law.