IAM Engineer: Secure Access and Compliance Expert

BDO USA; Raleigh (NC); On-site; USD 85,000 - 105,000; Full time

Benefits offered by this job

ESOP

Total Rewards benefits

Benefits eligible

Job summary

BDO USA Identity Access Management Engineer role is responsible for administering and enhancing IAM processes to provide secure, compliant access to firm systems and data. You will handle provisioning, deprovisioning, access reviews, role maintenance, and policy documentation in line with firm standards, collaborating with IT, People & Culture, Compliance, CISO, GC, and business stakeholders.

The position may require occasional alternative schedules, on-call support, weekend work, and moderate

Qualifications

• Three or more years in identity access management or related fields.
• Experience administering user lifecycle, provisioning, and access reviews.
• Experience in regulated or highly controlled environments with confidential data.
• Understanding of authentication protocols such as SAML 2.0 and OAuth/SSO.
• Experience with automated provisioning using SCIM, API, or JIT.
• Experience with ISO 20071, SOC2 preferred.
• Experience identifying improvements and enhancing access controls.

Responsibilities

• Administers user access to internal and external systems and networks.
• Reviews, coordinates, and completes provisioning and deprovisioning activities.
• Evaluates access requests to ensure least-privilege and proper authorization.
• Prepares and maintains documentation for standards and guides.
• Identifies gaps and develops improvements for access control.
• Performs periodic audits and access reviews for compliance.
• Develops IAM policies and governance documentation for new apps.
• Tests and supports IAM provisioning tools and workflows.
• Maintains automation logic within IAM tools.
• Ensures alignment with security standards and regulatory requirements.

Skills

Identity access management

Information security administration

Access governance

SAML/OAuth SSO

Education

Azure security cert

Active Directory cert

CIAM cert

Tools

Windows AD

Microsoft Entra ID

ServiceNow

M365 Admin

Workato

Job description

BDO USA Identity Access Management Engineer role is responsible for administering and enhancing IAM processes to provide secure, compliant access to firm systems and data. You will handle provisioning, deprovisioning, access reviews, role maintenance, and policy documentation in line with firm standards, collaborating with IT, People & Culture, Compliance, CISO, GC, and business stakeholders.

The position may require occasional alternative schedules, on-call support, weekend work, and moderate