Senior - IAM Engineer, Information Security (51912)

Citrin Cooperman offers a dynamic work environment, fostering professional growth and collaboration. We're continuously seeking talented individuals who bring a problem-solving mindset, fresh perspectives, and sharp technical expertise. We know you have choices, so our team of collaborative, innovative professionals are ready to support your professional development. At Citrin Cooperman, we offer competitive compensation and benefits and most importantly, the flexibility to manage your personal and professional life to focus on what matters most to you!

We are seeking a Senior - IAM Engineer, Information Security, to join our Information Security team within the Information Technology department.

Responsibilities are, but not limited to:

• Deep expertise in IAM domains: Identity Governance & Administration (IGA), Access Management (AM), and Privileged Access Management (PAM).
• Implementing and managing core IAM capabilities: SSO, MFA, RBAC/ABAC, conditional access, and identity lifecycle management.
• Developing user lifecycle processes (joiner/mover/leaver), provisioning, deprovisioning, and access certification workflows.
• Design and enforce least privilege access models and segregation of duties controls.
• Integrate IAM solutions with cloud (Azure, AWS, GCP) and on-prem environments.
• Design and implement IAM lifecycle management system and privileged account management system.
• Proficiency in scripting/automation (PowerShell, Python, Bash) for IAM automation and workflow orchestration.
• Strong understanding of directory services (Active Directory, Azure AD) and identity stores.
• IAM logging, monitoring, and incident response for authentication and access anomalies.

The ideal candidate must:

• Have a bachelor's degree or equivalent professional experience.
• Have a minimum of 7, prefer 10+ years, of experience in IT/security, with 3-5+ years specifically in IAM engineering or identity governance.
• Have hands-on experience with enterprise IAM platforms (e.g., Azure AD/Entra, Okta, SailPoint, CyberArk, DUO, Delinea).
• Have industry certifications such as Certified Identity and Access Manager (CIAM), ISC2 Certified Cybersecurity, SailPoint Identity Security Professional, etc.
• Possess excellent communication skills with ability to translate IAM risks and controls to business stakeholders.