Identity Access Management Engineer

BDO USA, P.C. • Columbia, SC

1d • $85,000 - $105,000

About The Position

The Identity Access Management Engineer administers and enhances identity and access management processes that support secure, compliant access to Firm systems, applications, and data. The role carries out user provisioning and deprovisioning, access reviews, role maintenance, and documentation in accordance with Firm policies and security standards. It exercises discretion and independent judgment to evaluate access requests, resolve exceptions, identify control gaps, and recommend process improvements.

The position partners with Information Technology, People & Culture, Compliance, the Office of the CISO, the Office of General Counsel, and business stakeholders to maintain appropriate access controls, protect confidential information, and support operational and regulatory requirements. It may require occasional alternative schedules, on-call support, weekend work, and moderate travel. The role has no supervisory responsibilities.

Requirements

• Three or more years of experience in identity access management, information security administration, or access governance.
• Experience administering user lifecycle processes, including provisioning, deprovisioning, transfers, and access reviews.
• Experience supporting regulated or highly controlled environments involving confidential or protected information.
• Understanding of authentication protocols such as SAML 2.0 or OAuth/SSO.
• Experience implementing automated endpoint provisioning using custom provisioning flows, SCIM, API, or JIT.
• Microsoft identity or Azure security certification.
• Active Directory administration training or certification.
• Strong verbal and written communication skills.
• Excellent interpersonal and customer relationship skills.
• Ability to work in a deadline-driven environment while handling multiple complex projects or tasks with attention to detail.
• Ability to multitask and work independently or within a group environment.
• Ability to rely on extensive experience and judgment to plan and accomplish goals.
• Ability to work well under pressure and handle unexpected problems professionally.
• Ability to communicate and interact with employees and management at all levels.
• Ability to build relationships and consensus.
• Advanced knowledge and understanding of Firm standard applications and all aspects of the desktop environment.
• Ability to instruct end users in the use of equipment or software and advise them regarding policies and procedures.
• Ability to research and resolve problems, acquire and maintain knowledge of relevant software solutions, and support Firm policies and procedures.
• Ability to travel for Firm business on a moderate basis.

Nice To Haves

• Experience with ISO 20071, QC-1000, and SOC2 frameworks and controls.
• Experience identifying process improvements and implementing access control enhancements.
• Certified Identity Access Manager (CIAM) certification.
• Microsoft 365 Admin experience.
• Workato provisioning tools experience.

Responsibilities

• Administer user access to internal and external systems, applications, and network-based resources.
• Review, approve, coordinate, and complete access provisioning, modification, and deprovisioning in accordance with Firm policies, access standards, and security requirements.
• Evaluate access requests and exceptions using discretion and independent judgment to ensure appropriate authorization, segregation of duties, and least-privilege access.
• Prepare and maintain documentation for operating standards, access standards, policies, system access guides, and procedures.
• Identify process gaps and control weaknesses and develop improvements for granting, modifying, and revoking access.
• Perform periodic audits and access reviews to confirm compliance with approved access models, internal controls, and Firm requirements.
• Develop and maintain access guides for applications supported by the Identity Access Management function and validate access configurations through testing.
• Test and support identity and access management provisioning tools and related workflows.
• Maintain and update business rules, role structures, and automation logic within IAM tools.
• Validate approvals, business justification, and supporting documentation before granting or modifying access.
• Determine whether requested access aligns with least-privilege principles, segregation of duties requirements, and established security standards.
• Assess access-related risks and identify exceptions before permissions are granted or modified.
• Develop and maintain IAM policies, access standards, onboarding requirements, and governance documentation for applications introduced into the environment.
• Partner with project teams, vendors, and business stakeholders to define identity lifecycle requirements, access models, provisioning methods, and ongoing governance controls for new applications.
• Design, configure, and maintain automated provisioning workflows, exception handling processes, and identity lifecycle automation within IAM tools.
• Manage identity and access administration for assigned business domains, including evaluating access requirements, validating approvals, and ensuring compliance with applicable security and regulatory requirements.
• Apply technical expertise, risk assessment, and decision-making in support of the Firm’s security and compliance objectives.
• Complete assigned work items, service requests, and queue responsibilities within established service levels.
• Perform other duties as required.

Benefits

• The firm describes comprehensive compensation and Total Rewards benefits; specific benefits are subject to eligibility requirements.
• Employee Stock Ownership Plan (ESOP), offering participants beneficial ownership and a stake in the firm’s success.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed