IAM Engineer

Company Description:

Tradeweb Markets is a world leader in the evolution of electronic trading. A fintech company serving approximately 2,500 clients - including the world's largest banks, asset managers, hedge funds, insurance companies, wealth managers and retail clients -- in more than 65 countries across the globe. Since our first trade in 1998, we have helped transform and electronify the fixed income markets. Tradeweb is a culture built on innovation, creativity and collaboration. Through a combination of very talented and driven people, innovative products and solutions, cutting-edge technology, market data, and a vast network of clients, we continue to work together to improve the way financial markets trade.

Mission: Move first and never stop. Collaborate with clients to create and build solutions that drive efficiency, connectivity, and transparency in electronic trading.

Tradeweb Markets LLC ("Tradeweb") is proud to be an EEO Minorities/Females/Protected Veterans/Disabled/Affirmative Action Employer.
https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf

Job Description:

To capitalize on our success and continued growth, we are seeking a detail-oriented, results-driven IAM Engineer to join our Identity & Access Management (IAM) team. This role will be responsible for engineering and supporting both our Single Sign-On (SSO) integrations and our Identity Governance & Administration (IGA) platform to ensure secure, scalable, and auditable access across the organization.

The ideal candidate will work across the full identity lifecycle—designing and integrating enterprise applications into our SSO infrastructure using modern federation standards (SAML, OIDC, OAuth2), while also onboarding those applications into our IGA platform (such as SailPoint, Saviynt, or equivalent) to enforce role-based access control (RBAC), streamline entitlement reviews, and support regulatory compliance initiatives.

We are looking for an engineer with a strong technical foundation in identity systems who can build and automate IAM solutions, contribute to role modeling and access policies, and communicate effectively with both technical teams and compliance stakeholders. Experience in the financial industry and familiarity with regulatory frameworks (e.g., SOX, GLBA, FFIEC) are strongly preferred.

Job Responsibilities:

Support the implementation of access certification processes within the IGA platform (e.g., SailPoint, Saviynt) to ensure periodic entitlement reviews align with least-privilege principles and compliance requirements.

Contribute to the integration of applications with Single Sign-On (SSO) using identity federation protocols such as SAML, OIDC, and OAuth2, collaborating with application teams and security architects.

Work closely with IAM architects and application teams to onboard applications into the IGA platform, ensuring entitlement data, user attributes, and provisioning rules are accurately mapped and configured.

Analyze access patterns and application entitlements to assist in role mining, entitlement rationalization, and the development of scalable, governance-aligned role models.

Document technical specifications, data mappings, and integration workflows for SSO and IGA implementations, supporting both technical teams and audit requirements.

Configure and maintain integrations between target systems and the IGA platform, ensuring proper lifecycle management of users and entitlements.

Assist in the creation of access policies and role definitions, aligning with business and compliance requirements.