Senior IT Security Engineer (Identity & Customer Access Management)

BITCO Corporation is seeking a Senior IT Security Engineer (Identity & Customer Access Management) to join our home office located in Davenport, IA. As a respected specialty insurer with 11 branch offices across 10 states, BITCO delivers tailored insurance solutions to complex industries such as construction, forest products, and oil and gas. This position is open to a hybrid work arrangement, blending flexibility with meaningful in-person collaboration.

 

At BITCO, our work is guided by core values. We care deeply about our people, partners, and customers. We are committed to excellence and accountability. We deliver on our promises with integrity and precision, and we strive to make a meaningful impact in everything we do. These values drive our mission to protect the people and industries that keep America running.

 

Join the BITCO team and be part of a workplace built on collaboration, open communication, and a positive culture that supports growth and success. If you are passionate about operational excellence and ready to make a measurable impact within a growing, industry-leading organization, BITCO offers the platform and challenge you have been looking for.

 

Position Summary:

As part of the Cybersecurity team, the Senior IT Security Engineer will focus on maturing IAM/CIAM Services by resolving complex access issues and responding to audit requests. You will be responsible for assisting with all types of user’s access policy, process, and audit needs, applying improved role definitions, and following up on compliance evidence requests. This role is an elevated position built to help build the future of IAM/CIAM practices at BITCO and provide excellent customer services while troubleshooting access issues preventing a user from performing their role.

 

This role is responsible for handling information technology security practices focused on Identity and Customer Identity Access Management, in addition to procedures which includes analyzing, implementing, and monitoring practices and procedures enhancing our Cybersecurity profile. This role also participates in activities with the Internal Audit department and outside auditors to ensure internal and external security requirements are implemented and maintained as required.

 

Primary Responsibilities:

• Review, modify, and administer identity lifecycle management processes, ensuring timely and accurate provisioning/de-provisioning of user accounts and access rights.
• Collaborate with cross-functional teams to integrate IAM/CIAM solutions with enterprise applications, directories, and infrastructure components.
• Facilitate regular access reviews and audits to ensure compliance with regulatory requirements and internal security policies.
• Evaluate business impact and risk exposure based on the level of access granted and make recommendations on where improvements should be made.
• Engage across functional teams to ensure we are implementing role-based security across all modern business applications with a minimal access-based philosophy.
• Maintain understanding of business processes to aid in managing enterprise identity and access requirements.
• Troubleshoot IAM/CIAM- related issues, investigate root causes, and work to implement corrective actions to maintain system availability and integrity.
• Develop and maintain documentation, procedures, and guidelines related to IAM/CIAM operations and processes.
• Provide IAM/CIAM technical guidance and mentorship members of the Operations team.
• Facilitate IAM/CIAM functionality discussions with customers to increase awareness in current role and access definitions.
• Work directly with application and system owners across the organization to gather information on entitlements and access needs.
• Work directly with application and systems owners to define and document application integration requirements with Organizational Information Management
• Participates in the recommendation, acquisition, configuration, and maturation of software/utilities used to administer, monitor, and review information technology security activities
• Develops and maintains an understanding of various security software/utilities relationships to administer, monitor and review security related activities, periodically reviewing the configuration of these tools to ensure we have comprehensive security coverage.