Senior IAM Engineer: Cloud & Hybrid Security

Crowe; Chicago (IL); On-site; USD 80,500 - 159,300; Full time

Benefits offered by this job

Total rewards package

Job summary

Crowe in the United States is seeking a Senior IAM Engineer to design, build, and implement enterprise IAM and authorization solutions across cloud, on‑premises, and hybrid environments. You will work directly with clients and cross‑functional teams to strengthen security posture, support digital transformation, and streamline identity workflows through API‑driven integrations and governance tooling.

The role blends hands‑on engineering with solution design and client engagement, offering

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.
• 4–7 years of experience in IAM, cybersecurity engineering, or related roles (consulting or industry).
• Experience implementing IAM solutions across cloud and/or hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance, provisioning, and access management processes.
• Hands-on experience with IAM tools such as Entra ID (Azure AD), SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar.
• Experience with API‑based integrations and identity data flows (REST APIs, JSON, SCIM).
• Familiarity with scripting or automation (Python, SQL, or similar).
• Understanding of non‑human identities (service accounts, APIs, workloads, AI agents).
• Strong analytical and problem‑solving skills.
• Strong communication skills and ability to work directly with clients and technical teams.

Responsibilities

• Design and implement IAM solutions across cloud (Azure, AWS, GCP), on‑premises, and hybrid environments.
• Build and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Support implementation of modern identity and authorization platforms, including fine‑grained authorization and entitlement visibility solutions.
• Develop and guide API‑driven integrations between IAM platforms and enterprise systems.
• Support onboarding and adoption of IAM and authorization capabilities, including requirements gathering, solution configuration, and deployment activities.
• Implement identity governance capabilities, including provisioning, access reviews, and privileged access controls.
• Provide guidance on authentication and authorization approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Evaluate and support implementation of IAM technologies and tools (Entra ID/Azure AD, SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar).
• Conduct IAM‑related assessments, including control evaluations, configuration reviews, and remediation support.
• Support alignment with cybersecurity frameworks and regulatory requirements (NIST, ISO, CIS).
• Collaborate with cross‑functional teams including security, cloud, application development, and risk/compliance.
• Contribute to broader cybersecurity engagements, including risk assessments and security program maturity efforts, as needed.
• Participate in client workshops, knowledge transfer sessions, and enablement activities.

Skills

IAM engineering

Cloud & hybrid IAM

OAuth/OIDC/SAML

API integrations

Scripting (Python)

Analytical thinking

Client communication

Education

Bachelor's degree in Information Systems/CS/Cybersecurity/Engineering

Tools

Entra ID / Azure AD

SailPoint

Saviynt

CyberArk

Ping Identity

Okta

Job description

Crowe in the United States is seeking a Senior IAM Engineer to design, build, and implement enterprise IAM and authorization solutions across cloud, on‑premises, and hybrid environments. You will work directly with clients and cross‑functional teams to strengthen security posture, support digital transformation, and streamline identity workflows through API‑driven integrations and governance tooling.

The role blends hands‑on engineering with solution design and client engagement, offering