IAM Engineer: Provisioning & Access Governance

BDO USA, Llp; Orlando (FL); On-site; USD 85,000 - 105,000; Full time

Job summary

BDO USA, LLP is seeking an Identity Access Management Engineer to administer and enhance identity and access management processes across Firm systems and data. You will perform provisioning, deprovisioning, access reviews, and policy documentation, collaborating with IT, Compliance, and business stakeholders to maintain appropriate access controls.

This role may involve occasional travel and on-call coverage.

Qualifications

• Three or more years in identity access management or access governance.
• Experience administering user lifecycle processes: provisioning, deprovisioning, transfers, reviews.
• Experience in regulated environments with confidential data.
• Understanding of SAML 2.0 or OAuth/SSO authentication protocols.
• Automation provisioning using SCIM, API, or JIT approaches.
• Awareness of ISO 20071, SOC2 frameworks and controls (preferred).
• Ability to identify and implement access control improvements.

Responsibilities

• Administers user access to systems, apps, and network resources.
• Executes provisioning/deprovisioning per policy and reviews activities.
• Evaluates access requests to ensure least-privilege and proper authorization.
• Maintains operation standards, access policies, and procedure guides.
• Identifies control gaps and implements improvements for access grants.
• Performs periodic audits and access reviews for compliance.
• Maintains IAM guides and validates access configurations via testing.
• Tests and supports IAM provisioning tools and workflows.
• Maintains and updates IAM business rules, roles, and automation logic.
• Ensures approvals and documentation align with business justifications.

Skills

Identity access management

Access governance

Provisioning

Deprovisioning

Access reviews

Least-privilege access

SOD awareness

Education

Microsoft identity or Azure security certification

Active Directory administration training/certification

Certified Identity Access Manager (CIAM)

Tools

Windows Active Directory

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Job description

BDO USA, LLP is seeking an Identity Access Management Engineer to administer and enhance identity and access management processes across Firm systems and data. You will perform provisioning, deprovisioning, access reviews, and policy documentation, collaborating with IT, Compliance, and business stakeholders to maintain appropriate access controls.

This role may involve occasional travel and on-call coverage.