Senior IAM Engineer — Cloud & Hybrid Security

Crowe; San Francisco (CA); On-site; USD 80,500 - 159,300; Full time

Job summary

Crowe seeks an Identity and Access Management Engineer - Senior Consultant to design and implement IAM solutions across cloud, on‑premises, and hybrid environments. You will work with client stakeholders to build and integrate IAM platforms with enterprise applications, APIs, and DevOps pipelines.

Role focuses on hands‑on engineering, solution design, and guiding authentication strategies (SSO, MFA, passwordless). 4–7 years IAM experience, bachelor’s degree required, and U.S. work authorization.

Qualifications

• Bachelor's degree in a related field required.
• 4–7 years of IAM or cybersecurity engineering experience.
• Experience implementing IAM across cloud and/or hybrid environments.
• Hands-on experience with IAM tools such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, or Okta.
• Experience with API-based integrations and identity data flows (REST APIs, JSON, SCIM).
• Familiarity with scripting or automation (Python, SQL).
• Understanding of non-human identities (service accounts, APIs, workloads).
• Strong analytical, problem-solving and client-facing communication skills.

Responsibilities

• Design and implement IAM solutions across cloud, on-premises, and hybrid environments.
• Build and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Support onboarding and adoption of IAM and authorization capabilities.
• Provide guidance on authentication and authorization approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Evaluate and support IAM technologies and tools (Entra ID/Azure AD, SailPoint, Saviynt, CyberArk, Ping Identity, Okta).
• Collaborate with cross-functional teams and participate in client workshops.

Skills

OAuth2

OIDC

SAML

SCIM

LDAP

API integrations

Scripting (Python/SQL)

Non-human identities (service accounts

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field

Tools

Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

Ping Identity

Okta

Job description

Crowe seeks an Identity and Access Management Engineer - Senior Consultant to design and implement IAM solutions across cloud, on‑premises, and hybrid environments. You will work with client stakeholders to build and integrate IAM platforms with enterprise applications, APIs, and DevOps pipelines.

Role focuses on hands‑on engineering, solution design, and guiding authentication strategies (SSO, MFA, passwordless). 4–7 years IAM experience, bachelor’s degree required, and U.S. work authorization.