Senior IAM Engineer: Hybrid Cloud Identity & Access

CLA (CliftonLarsonAllen); Charlotte (NC); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

401(k)

Job summary

CLA, a top 10 national professional services firm, seeks an IAM Senior Engineer to join our Information Technology team in Charlotte, NC. You will plan and execute IAM programs across cloud and on‑premises, delivering secure identity solutions enterprise‑wide.

Design RBAC, manage Entra ID and AD, implement passwordless authentication, and build automation with PowerShell and Terraform while mentoring teammates in a collaborative, growth‑oriented culture.

Qualifications

• Bachelor's degree required; combination of experience and training considered.
• Strong experience with Microsoft Entra ID and Active Directory.
• Experience implementing Conditional Access, RBAC and identity governance.
• PowerShell automation and IaC (Terraform) experience.
• Knowledge of SAML, OAuth and OpenID Connect.

Responsibilities

• Plan and execute IAM programs in cloud and on‑premises.
• Design RBAC models and access governance frameworks.
• Manage Entra ID, AD and hybrid identity environments.
• Develop automation with PowerShell, Python, and Terraform.
• Lead IAM security governance, auditing, and incident response.

Skills

Active Directory

Entra ID

PowerShell

Terraform

RBAC

PIM

Conditional Access

OIDC

SAML

Education

Bachelor's degree in Computer Science / Information Technology or related field

Tools

PingOne

Terraform

Job description

CLA, a top 10 national professional services firm, seeks an IAM Senior Engineer to join our Information Technology team in Charlotte, NC. You will plan and execute IAM programs across cloud and on‑premises, delivering secure identity solutions enterprise‑wide.

Design RBAC, manage Entra ID and AD, implement passwordless authentication, and build automation with PowerShell and Terraform while mentoring teammates in a collaborative, growth‑oriented culture.