IAM Engineer — Secure Access & Lifecycle Automation

BDO USA, Llp; Columbus (OH); In loco; USD 85.000 - 105.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESOP

Total Rewards benefits

Descrizione del lavoro

BDO USA, LLP seeks an Identity Access Management Engineer to safeguard firm systems by administering and improving IAM processes, ensuring least privilege, and maintaining robust access governance.

You will lead provisioning/deprovisioning, access reviews, and policy documentation, collaborating with IT, Compliance, and stakeholders to meet regulatory requirements and internal controls. Occasional travel and on-call support may be required.

Competenze

• Three+ years of identity access management or related security administration experience.
• Experience administering user lifecycle processes: provisioning, deprovisioning, transfers, and access reviews.
• Experience in regulated or highly controlled environments handling confidential information.
• Understanding of authentication protocols (SAML 2.0, OAuth/SSO) and automated provisioning.
• Familiarity with ISO 20071, SOC2 controls and security frameworks is a plus.

Mansioni

• Administers user access to internal and external systems and networks.
• Manages provisioning, modification, and deprovisioning per policies and security requirements.
• Performs access reviews and ensures least-privilege and proper segregation of duties.
• Maintains documentation for standards, policies, and access guides.
• Identifies control gaps and implements access control improvements.
• Conducts periodic audits to verify compliance with models and controls.
• Maintains IAM policies, onboarding requirements, and governance docs.
• Partner with project teams to define identity lifecycle requirements for new apps.
• Designs and maintains automated provisioning workflows and lifecycle automation.

Conoscenze

Identity & access management

Information security

Access governance

SAML/OAuth/SSO

Provisioning workflows

Risk assessment

Formazione

Microsoft identity or Azure security certification

Active Directory administration training or certification

CIAM certification

Strumenti

Windows Active Directory Administration

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Descrizione del lavoro

BDO USA, LLP seeks an Identity Access Management Engineer to safeguard firm systems by administering and improving IAM processes, ensuring least privilege, and maintaining robust access governance.

You will lead provisioning/deprovisioning, access reviews, and policy documentation, collaborating with IT, Compliance, and stakeholders to meet regulatory requirements and internal controls. Occasional travel and on-call support may be required.