Identity and Access Management Engineer- Senior Consultant

Crowe; Chicago (IL); On-site; USD 80,500 - 159,300; Full time

Benefits offered by this job

Total rewards package

Job summary

Crowe in the United States is seeking a Senior IAM Engineer to design, build, and implement enterprise IAM and authorization solutions across cloud, on‑premises, and hybrid environments. You will work directly with clients and cross‑functional teams to strengthen security posture, support digital transformation, and streamline identity workflows through API‑driven integrations and governance tooling.

The role blends hands‑on engineering with solution design and client engagement, offering

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.
• 4–7 years of experience in IAM, cybersecurity engineering, or related roles (consulting or industry).
• Experience implementing IAM solutions across cloud and/or hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance, provisioning, and access management processes.
• Hands-on experience with IAM tools such as Entra ID (Azure AD), SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar.
• Experience with API‑based integrations and identity data flows (REST APIs, JSON, SCIM).
• Familiarity with scripting or automation (Python, SQL, or similar).
• Understanding of non‑human identities (service accounts, APIs, workloads, AI agents).
• Strong analytical and problem‑solving skills.
• Strong communication skills and ability to work directly with clients and technical teams.

Responsibilities

• Design and implement IAM solutions across cloud (Azure, AWS, GCP), on‑premises, and hybrid environments.
• Build and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Support implementation of modern identity and authorization platforms, including fine‑grained authorization and entitlement visibility solutions.
• Develop and guide API‑driven integrations between IAM platforms and enterprise systems.
• Support onboarding and adoption of IAM and authorization capabilities, including requirements gathering, solution configuration, and deployment activities.
• Implement identity governance capabilities, including provisioning, access reviews, and privileged access controls.
• Provide guidance on authentication and authorization approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Evaluate and support implementation of IAM technologies and tools (Entra ID/Azure AD, SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar).
• Conduct IAM‑related assessments, including control evaluations, configuration reviews, and remediation support.
• Support alignment with cybersecurity frameworks and regulatory requirements (NIST, ISO, CIS).
• Collaborate with cross‑functional teams including security, cloud, application development, and risk/compliance.
• Contribute to broader cybersecurity engagements, including risk assessments and security program maturity efforts, as needed.
• Participate in client workshops, knowledge transfer sessions, and enablement activities.

Skills

IAM engineering

Cloud & hybrid IAM

OAuth/OIDC/SAML

API integrations

Scripting (Python)

Analytical thinking

Client communication

Education

Bachelor's degree in Information Systems/CS/Cybersecurity/Engineering

Tools

Entra ID / Azure AD

SailPoint

Saviynt

CyberArk

Ping Identity

Okta

Job description

Job Description

Senior Consultant - Identity and Access Management (IAM) Engineer

As an IAM Engineer, you will play a key role in designing, building, and implementing enterprise IAM and authorization solutions. You will work with clients across industries to modernize identity capabilities, strengthen security posture, and support digital transformation across cloud, on‑premises, and hybrid environments.

This role combines hands‑on engineering, solution design, and client engagement, enabling organizations to secure identities, support business objectives, and enhance user experience.

Key Responsibilities

• Design and implement IAM solutions across cloud (Azure, AWS, GCP), on‑premises, and hybrid environments.
• Build and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Support implementation of modern identity and authorization platforms, including fine‑grained authorization and entitlement visibility solutions.
• Develop and guide API‑driven integrations between IAM platforms and enterprise systems.
• Support onboarding and adoption of IAM and authorization capabilities, including requirements gathering, solution configuration, and deployment activities.
• Implement identity governance capabilities, including provisioning, access reviews, and privileged access controls.
• Provide guidance on authentication and authorization approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Evaluate and support implementation of IAM technologies and tools (Entra ID/Azure AD, SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar).
• Conduct IAM‑related assessments, including control evaluations, configuration reviews, and remediation support.
• Support alignment with cybersecurity frameworks and regulatory requirements (NIST, ISO, CIS).
• Collaborate with cross‑functional teams including security, cloud, application development, and risk/compliance.
• Contribute to broader cybersecurity engagements, including risk assessments and security program maturity efforts, as needed.
• Participate in client workshops, knowledge transfer sessions, and enablement activities.

Required Experience

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.
• 4‑7 years of experience in IAM, cybersecurity engineering, or related roles (consulting or industry).
• Experience implementing IAM solutions across cloud and/or hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance, provisioning, and access management processes.
• Hands‑on experience with IAM tools such as Entra ID (Azure AD), SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar.
• Experience with API‑based integrations and identity data flows (REST APIs, JSON, SCIM).
• Familiarity with scripting or automation (Python, SQL, or similar) to support integrations and data analysis.
• Understanding of non‑human identities (service accounts, APIs, workloads, AI agents) and their role in modern IAM environments.
• Strong analytical and problem‑solving skills.
• Strong communication skills and ability to work directly with clients and technical teams.

Preferred Qualifications

• Experience supporting IAM implementations, onboarding efforts, or platform integrations.
• Experience in regulated industries (financial services, healthcare, government).
• Familiarity with AI/automation in cybersecurity or identity governance.
• Familiarity with workflow and governance platforms (ServiceNow) supporting identity‑related processes such as access requests, approvals, and compliance workflows.
• Relevant certifications (vendor IAM certifications, progress toward CISSP/CISM).

Compensation

The wage range for this role is $80,500.00 – $159,300.00 per year.

Our Benefits

Your exceptional people experience starts here. At Crowe, we care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you!

How You Can Grow

We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!

More About Crowe

Crowe is one of the largest public accounting, consulting and technology firms in the United States. Crowe uses its deep industry expertise to provide audit services to public and private entities while also helping clients reach their goals with tax, advisory, risk and performance services. Crowe is recognized by many organizations as one of the country's best places to work. Crowe serves clients worldwide as an independent member of Crowe Global, one of the largest global accounting networks in the world.

Equal Employment Opportunity

Crowe LLP provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws. We are committed to a merit‑based hiring process and evaluate all candidates consistently using objective, job‑related criteria. We are an equal opportunity employer and we do not accept unsolicited candidates, referrals or resumes from any staffing agency or recruiting service at any time.