Senior IAM Engineer: Cloud & On-Prem Identity

CliftonLarsonAllen; Austin (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Wellness options

Health benefits including dental and 4

401(k) benefits

Job summary

CLA is growing and seeking to hire an experienced Identity & Access Management (IAM) Senior Engineer to join our Information Technology team. The position offers growth, flexibility and a collaborative work environment.

The IAM Senior Engineer will plan and execute programs in the cloud and on premises, design and enforce RBAC, manage Entra ID and Active Directory, enable passwordless authentication, and lead IAM initiatives with cross-functional teams.

Qualifications

• 4+ years of IAM experience.
• Experience managing hybrid identity environments (Entra ID and AD).
• Experience administering Domain Controllers, DNS, and Group Policy.
• Experience implementing Conditional Access, RBAC, PIM, and identity governance.

Responsibilities

• Design, implement, and maintain IAM infrastructure and security controls.
• Lead IAM projects and cross-functional collaboration.
• Develop and maintain identity lifecycle processes and access governance.
• Integrate Entra ID with enterprise systems and cloud apps.
• Provide technical leadership and mentoring to junior staff.

Education

Bachelor's degree in Computer Science or Information Technology

Degrees in Computer Science, Information Technology, or a related field

Tools

Active Directory

Group Policy Objects (GPO)

DNS

Microsoft Entra ID

SAML

OAuth

OpenID Connect

RBAC

PIM

Passwordless authentication

Terraform

Infrastructure as Code (IaC)

PowerShell

PingOne

Job description

CLA is growing and seeking to hire an experienced Identity & Access Management (IAM) Senior Engineer to join our Information Technology team. The position offers growth, flexibility and a collaborative work environment.

The IAM Senior Engineer will plan and execute programs in the cloud and on premises, design and enforce RBAC, manage Entra ID and Active Directory, enable passwordless authentication, and lead IAM initiatives with cross-functional teams.