Job Description:Location OverviewThis role follows a four day in office work model and can be based out of our Chicago or Overland Park, Kansas office. Cboe HQ is located in the historic Old Post Office district, it's a landmark that blends classic architecture with modern amenities. The building features expansive spaces with high ceilings and large windows, offering an abundance of natural light and panoramic views of the city skyline and the Chicago River.
With its prime location in the heart of downtown, the OPO Building provides easy access to major transportation hubs, including Union Station and multiple CTA lines, making it convenient for commuters. The building is home to a variety of amenities, including restaurants, a fitness center, and collaborative workspaces, creating a vibrant and dynamic work environment in one of Chicago's most iconic areas.
Cboe Global Markets operates a key office in the Overland Park Xchange (OPx), located in Overland Park, Kansas, a bustling suburb of Kansas City. The OPx business park is strategically positioned to provide convenient access to the Kansas City metropolitan area, offering modern infrastructure and a collaborative environment ideal for the financial services and technology industries. This location benefits from proximity to major highways, making it easily accessible for employees
The OPx site provides a balance of high-quality office space, advanced facilities, and an environment conducive to productivity and growth.
Role Overview- The Cboe Identity Governance and Administration team is hiring an IGA engineer to contribute to the maturation of our enterprise IGA platform. You will implement processes for identity lifecycle management and access governance (RBAC/ABAC, certifications) across hybrid environments (on-premises + cloud). You'll partner with Information Security, Infrastructure, and Software Development teams to align identity controls with business and compliance objectives.
- The IGA team enables the Cboe mission of building trusted markets by enabling trusted digital identities. We partner with our technology and business partners to deliver new solutions to a dynamic marketplace. You will have the opportunity to bring maturity to our IGA program through software engineering and quality assurance discipline. You will work with top-flight infrastructure and software engineers to support Cboe's mission. And you will leverage your expertise to mentor junior engineers and interns.
Your responsibilities will be:- Engineer & Operate Core IGA Platforms - Participate in the design and maintenance of identity platforms (e.g., Microsoft Entra ID/AD, SailPoint/Saviynt) for RBAC/ABAC, SSO, provisioning/deprovisioning, and access policy enforcement.
- Lifecycle Automation & Integrations - Build automated Joiner/Mover/Leaver workflows, connectors (SCIM/REST/JDBC), app onboarding, and identity events using PowerShell, Python, APIs (e.g., Microsoft Graph, Okta APIs).
- Tier 2 Customer Support - Serve as an escalation point for our IGA Governance and Operations team to support our Infrastructure partners and IGA users. Monitor support queue as needed to provide operational coverage.
- Access Governance & Compliance - Implement access requests/approvals, access certifications, and audit-ready controls.
- Monitoring, Troubleshooting & Runbooks - Instrument security and system logging, tune performance, and maintain runbooks and SOPs.
- Standards & Roadmap - Contribute to IGA policies/standards, document designs, and mentor engineers; evaluate emerging identity tech/features and drive safe adoption.
- Partner with GRC and Audit teams to meet SOX/NIST/GDPR and regulatory requirements and remediate findings.
The ideal candidate has- Bachelor's degree in Computer Science, Cybersecurity, or related field.
- 2+ years of IGA/IAM engineering experience within complex enterprise environments.
- Experience with GenAI coding assistance and leveraging AI to improve IGA processes.
- Solid knowledge of Directory Services/LDAP, identity logging/monitoring, and CI/CD/change processes.
- Stakeholder communication - proficient in documenting architectural and technical specifications and translating complex identity concepts for non-technical audiences.
Benefits and Perks of working for Cboe Global MarketsWe value the total wellbeing of our people - including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer:
- Fair and competitive salary and incentive compensation packages with an upside for overachievement
- Generous paid time off, including vacation, personal days, sick days and annual community service days
- Health, dental and vision benefits, including access to telemedicine and mental health services
- 2:1 401(k) match, up to 8% match immediately upon hire
- Discounted Employee Stock Purchase Plan
- Tax Savings Accounts for health, dependent and transportation
- Employee referral bonus program
- Volunteer opportunities to help you give back to your communities
Some of our associates' favorite benefits and perks include:
- Complimentary lunch, snacks and coffee in any Cboe office
- Paid Tuition assistance and education opportunities
- Generous charitable giving company match
- Paid parental leave and fertility benefits
- On-site gyms and discounts to other fitness centers
Salary Ranges (applicable for US locations only)At Cboe, we are committed to providing a competitive, transparent, and market-informed total rewards program. The anticipated base salary range for this role is $93,500-$133,100, with actual compensation determined by job-related factors such as skills, relevant experience, education, internal alignment, and location.
This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long-term equity programs.
Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE.
Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.