IAM Engineer: Access Lifecycle & Governance

BDO USA; Detroit (MI); On-site; USD 85,000 - 105,000; Full time

Benefits offered by this job

ESOP

Job summary

BDO USA is seeking an Identity Access Management Engineer to administer and enhance IAM processes for secure access to firm systems and data. The role involves provisioning, deprovisioning, access reviews, role maintenance, and policy documentation in line with security standards.

Occasional on-call, weekend work, and moderate travel may be required. The candidate will work with IT, Compliance, and business stakeholders to ensure appropriate access controls, protect confidential information, and

Qualifications

• Three (3) or more years of IAM, security administration, or access governance experience.

Responsibilities

• Administers user access to internal systems and networks.
• Reviews provisioning, deprovisioning, and access reviews per policy.
• Ensures least-privilege and proper segregation of duties in access decisions.
• Maintains and updates IAM policies and governance documentation.
• Tests and supports IAM provisioning tools and workflows.
• Collaborates with IT, compliance, security, and business stakeholders.

Skills

IAM operations

Access governance

Incident response

Risk assessment

Policy compliance

Education

Microsoft identity or Azure security certification

Active Directory administration certification

Certified Identity Access Manager (CIAM)

Tools

Windows Active Directory Administration

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Job description

BDO USA is seeking an Identity Access Management Engineer to administer and enhance IAM processes for secure access to firm systems and data. The role involves provisioning, deprovisioning, access reviews, role maintenance, and policy documentation in line with security standards.

Occasional on-call, weekend work, and moderate travel may be required. The candidate will work with IT, Compliance, and business stakeholders to ensure appropriate access controls, protect confidential information, and