IAM Engineer: Secure Access & Governance

BDO USA, LLP; Columbus (OH); On-site; USD 85,000 - 105,000; Full time

Job summary

BDO USA, LLP is seeking an Identity Access Management Engineer to administer and enhance IAM processes supporting secure access to Firm systems, applications, and data.

The role handles user provisioning/deprovisioning, access reviews, role maintenance, and documentation while partnering with IT, Compliance, and business stakeholders to maintain controls and meet regulatory requirements.

Qualifications

• Three or more years of identity access management or security administration experience.
• Experience with provisioning, deprovisioning, access reviews and role maintenance.
• Familiarity with regulated environments and SOC2 controls.
• Knowledge of authentication protocols (SAML, OAuth, SSO).
• Experience with automated provisioning and IAM tooling.

Responsibilities

• Administers user access to internal and external systems and resources.
• Reviews provisioning and deprovisioning per policies and standards.
• Evaluates requests to ensure least-privilege and proper segregation of duties.
• Documents operating standards, access policies, and user guides.
• Performs access audits and reviews for compliance.
• Maintains IAM policies, roles, and automation logic in IAM tools.
• Validates approvals and ensures alignment with security standards.
• Collaborates with IT, Compliance, and stakeholders on identity lifecycle requirements.
• Designs and configures automated provisioning workflows.
• Travel may be required for firm business.

Skills

Identity access management

Information security

Access governance

Policy compliance

Tools

Windows Active Directory

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Job description

BDO USA, LLP is seeking an Identity Access Management Engineer to administer and enhance IAM processes supporting secure access to Firm systems, applications, and data.

The role handles user provisioning/deprovisioning, access reviews, role maintenance, and documentation while partnering with IT, Compliance, and business stakeholders to maintain controls and meet regulatory requirements.