Identity Access Engineer — Secure Access & Automation

BDO USA, LLP; Columbia (SC); On-site; USD 85,000 - 105,000; Full time

Job summary

BDO USA, LLP seeks an Identity Access Management Engineer to administer and enhance IAM processes, supporting secure access to firm systems, applications, and data. You will perform provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with firm policies and security standards.

The role involves evaluating access requests with discernment, addressing control gaps, and partnering with IT, compliance, and business stakeholders.

Qualifications

• 3+ years in identity access management, information security administration, or access governance.
• Experience with user lifecycle provisioning: provisioning/deprovisioning and access reviews.
• Experience with regulated environments and confidential information.
• Understanding of authentication protocols such as SAML 2.0 or OAuth/SSO.
• Experience automating provisioning using SCIM, API, or JIT.

Responsibilities

• Administers user access to systems and network resources.
• Performs provisioning, modification, and deprovisioning per policy and security requirements.
• Evaluates access requests ensuring least-privilege and segregation of duties.
• Documents operating standards, access policies, and system access guides.
• Identifies control gaps and drives improvements in access management.
• Conducts periodic audits and access reviews for compliance.
• Maintains IAM policies, governance documentation, and lifecycle rules.

Skills

IAM expertise

Information security

Access governance

SAML/OAuth

SCIM provisioning

API provisioning

JIT provisioning

Communication skills

Travel ability

Education

Microsoft identity or Azure security certification

Active Directory administration certification

Certified Identity Access Manager (CIAM)

Tools

Active Directory

Microsoft Entra ID

ServiceNow

Microsoft 365 Admin

Workato provisioning tools

Job description

BDO USA, LLP seeks an Identity Access Management Engineer to administer and enhance IAM processes, supporting secure access to firm systems, applications, and data. You will perform provisioning, deprovisioning, access reviews, role maintenance, and documentation in line with firm policies and security standards.

The role involves evaluating access requests with discernment, addressing control gaps, and partnering with IT, compliance, and business stakeholders.