Senior IAM Engineer & Consultant for Cloud Security

Crowe-Global; San Francisco (CA); On-site; USD 81,000 - 159,000; Full time

Job summary

Crowe is seeking a Senior IAM Engineer to design, implement, and govern identity solutions across cloud, on-prem, and hybrid environments. You will work with clients to secure identities, integrate IAM platforms with enterprise systems, and support governance and risk initiatives.

You will engage with cybersecurity teams and stakeholders, applying federation standards and API-driven integrations while contributing to broader security and compliance programs.

Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.
• 4–7 years of IAM, cybersecurity engineering, or related roles.
• Experience implementing IAM across cloud and/or hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance, provisioning, and access management processes.
• Hands-on experience with IAM tools such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, or Okta.
• Experience with API-based integrations and identity data flows (REST APIs, JSON, SCIM).
• Scripting (Python, SQL) to support Integrations and data analysis.
• Understanding of non-human identities (service accounts, APIs, workloads, AI agents).
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Design and implement IAM solutions across cloud, on-premises, and hybrid environments.
• Build and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Support implementation of modern identity and authorization platforms with fine-grained access controls.
• Develop API‑driven integrations between IAM platforms and enterprise systems.
• Guide onboarding of IAM capabilities, including configuration and deployment activities.
• Implement identity governance including provisioning, access reviews, and privileged controls.
• Provide guidance on authentication approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Evaluate IAM technologies (Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, Okta).
• Conduct IAM assessments, configuration reviews, and remediation support.
• Collaborate with security, cloud, development, and risk/compliance teams; participate in client workshops.

Skills

IAM

OAuth2/OIDC

APIs/REST

Python scripting

Education

Bachelor's degree in Information Systems/CS/Cybersecurity/Engineering

Tools

Entra ID/Azure AD

SailPoint

Saviynt

CyberArk

Ping Identity

Okta

Job description

Crowe is seeking a Senior IAM Engineer to design, implement, and govern identity solutions across cloud, on-prem, and hybrid environments. You will work with clients to secure identities, integrate IAM platforms with enterprise systems, and support governance and risk initiatives.

You will engage with cybersecurity teams and stakeholders, applying federation standards and API-driven integrations while contributing to broader security and compliance programs.