Identity & Access Engineer: IAM Automation & Security

BDO USA; Atlanta (GA); On-site; USD 85,000 - 105,000; Full time

Job summary

BDO USA is seeking an Identity Access Management Engineer to administer and enhance IAM processes that support secure access to Firm systems, applications, and data. This role performs user provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with Firm policies and security standards.

You will collaborate with IT, People & Culture, Compliance, the CISO, General Counsel, and business stakeholders to maintain proper access controls, support regulatory

Qualifications

• Three or more years in identity access management or related security roles.
• Experience administering user lifecycle processes including provisioning, deprovisioning, transfers, and access reviews.
• Experience in regulated or highly controlled environments with confidential information.
• Understanding of authentication protocols such as SAML 2.0 or OAuth/SSO.
• Experience with automated provisioning using SCIM, API, or JIT.
• ISO 20071, QC-1000, SOC2 frameworks and controls preferred.
• Experience identifying process improvements and implementing access control enhancements.

Responsibilities

• Administers user access to internal and external systems.
• Reviews, approves, coordinates, and completes provisioning, modification, and deprovisioning activities.
• Evaluates access requests and exceptions using discretion and independent judgment.
• Prepares and maintains documentation for operating standards, access standards, policies, and system access guides and procedures.
• Identifies process gaps and control weaknesses and develops improvements for granting, modifying, and revoking access.
• Performs periodic audits and access reviews to confirm compliance with approved access models, internal controls, and Firm requirements.
• Develops and maintains access guides for applications supported by the IAM function and validates access configurations through testing.
• Tests and supports identity and access management provisioning tools and related workflows.
• Maintains and updates business rules, role structures, and automation logic within IAM tools.
• Validates approvals, business justification, and supporting documentation before granting or modifying access.
• Determines whether requested access aligns with least-privilege principles, segregation of duties requirements, and established security standards.
• Assess access-related risk considerations and identify exceptions before permissions are granted or modified.
• Develops and maintains IAM policies, access standards, onboarding requirements, and governance documentation for applications introduced into the environment.
• Partners with project teams, vendors, and business stakeholders to define identity lifecycle requirements, access models, provisioning methods, and ongoing governance controls for new applications.
• Designs, configures, and maintains automated provisioning workflows, exception handling processes, and identity lifecycle automation within IAM tools.
• Manages identity and access administration activities for assigned business domains, including evaluating access requirements, validating approvals, and ensuring compliance with applicable security and regulatory requirements.
• Applies technical expertise, risk assessment, and decision-making in support of the Firm’s security and compliance objectives.
• Completes assigned work items, service requests, and queue responsibilities within established service levels.
• Other duties as required

Skills

Identity access management

Information security

Access governance

Regulatory compliance

Documentation

Education

Microsoft identity or Azure security certification

Active Directory administration training

CIAM certification

Tools

Windows Active Directory

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Job description

BDO USA is seeking an Identity Access Management Engineer to administer and enhance IAM processes that support secure access to Firm systems, applications, and data. This role performs user provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with Firm policies and security standards.

You will collaborate with IT, People & Culture, Compliance, the CISO, General Counsel, and business stakeholders to maintain proper access controls, support regulatory