IAM Engineer: Drive Secure Access & Identity Lifecycle

BDO USA, Llp; Miami (FL); Sur place; USD 85 000 - 105 000; Plein temps

Résumé du poste

BDO USA, P.A. seeks an Identity Access Management Engineer to administer and enhance IAM processes that support secure access to Firm systems, applications, and data.

This role executes user provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with Firm policies and security standards. It partners with IT, Compliance, and business stakeholders to maintain proper access controls.

Qualifications

• Three or more years of experience in identity access management, information security administration, or access governance.
• Experience administering user lifecycle processes, including provisioning, deprovisioning, transfers, and access reviews.
• Experience supporting regulated or highly controlled environments involving confidential information.
• Understanding of authentication protocols, such as SAML 2.0 or OAuth/SSO.
• Experience with automated provisioning using SCIM, API, or JIT.

Responsabilités

• Administers user access to internal and external systems, applications, and network resources.
• Reviews and coordinates provisioning, modification, and deprovisioning activities.
• Evaluates access requests and exceptions to ensure least-privilege and proper authorization.
• Maintains documentation for operating standards, access policies, and guides.
• Identifies control weaknesses and develops improvements for access management.
• Performs periodic audits and access reviews for compliance with models and controls.
• Develops access guides and validates configurations through testing.
• Tests and supports IAM provisioning tools and workflows.
• Maintains IAM policies, onboarding requirements, and governance docs.
• Ensures alignment with segregation of duties and security standards.
• Collaborates with project teams, vendors, and stakeholders on identity lifecycle requirements.
• Designs and maintains automated provisioning workflows and lifecycle automation.
• Manages IAM activities for assigned business domains and ensures regulatory compliance.

Connaissances

Identity access management

SAML 2.0

OAuth/SSO

Active Directory

Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Outils

Windows Active Directory Administration

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Description du poste

BDO USA, P.A. seeks an Identity Access Management Engineer to administer and enhance IAM processes that support secure access to Firm systems, applications, and data.

This role executes user provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with Firm policies and security standards. It partners with IT, Compliance, and business stakeholders to maintain proper access controls.