Senior IAM Engineer - (Entra ID/AD)
About the role
CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you. CLA is dedicated to building a culture that invites different beliefs and perspectives to the table, so we can truly know and help our clients, communities, and each other. CLA is growing and seeking to hire an experienced Identity & Access Management (IAM) Senior Engineer to join our talented Information Technology team. The position offers growth, flexibility and a collaborative work environment.
Responsibilities
- Execute the implementation and maintenance of complex Identity & Access Management (IAM) infrastructure.
- Plan and execute IAM projects and programs, ensuring alignment with business requirements, security standards, and delivery timelines.
- Automate and optimize identity lifecycle management processes, access provisioning, and governance controls.
- Integrate Entra ID with enterprise systems, cloud platforms, and third-party applications.
- Collaborate with cross-functional teams to support and drive IAM program goals and enterprise security initiatives.
- Monitor, troubleshoot, and maintain IAM infrastructure, ensuring optimal performance, reliability, and security.
- Document and maintain comprehensive IAM architecture, workflows, standards, and operating procedures.
- Implement and enforce IAM security, compliance, governance, and risk management best practices.
- Provide technical leadership and mentorship to junior team members.
- Participate in an on-call rotation supporting critical IAM systems and services.
- Design and support Role-Based Access Control (RBAC) models and access governance frameworks.
- Manage Privileged Identity Management (PIM) processes and privileged access controls.
- Implement and support passwordless authentication, managed identities, and modern identity security practices.
- Develop and maintain identity lifecycle processes, including onboarding, transfers, and offboarding.
- Ensure access controls comply with regulatory, audit, and security requirements.
- Support Identity Governance and Administration (IGA) capabilities and access certification processes.
- Administer and support Microsoft Entra ID, Active Directory, and hybrid identity environments.
- Manage on-premises Active Directory infrastructure, including Domain Controllers, organizational units, and directory services.
- Design, maintain, and enforce Group Policy Objects (GPOs) to support enterprise security and operational requirements.
- Design, implement, and maintain identity federation and authentication solutions.
- Support SAML, OAuth, and OpenID Connect integrations across enterprise applications.
- Implement and maintain Entra B2B, Entra External Identity, and Conditional Access Policies.
- Partner with business and technical teams to evaluate identity and access requirements for new systems and applications.
- Develop scalable and secure identity solutions that