Lead Identity Access Management Architect

Overview

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. CLA is dedicated to building a culture that invites different beliefs and perspectives to the table, so we can truly know and help our clients, communities, and each other.

• Flexible PTO (designed to offer flexible time away for you!)
• Up to 12 weeks paid parental leave
• Paid Volunteer Time Off
• Mental health coverage
• Quarterly Wellness stipend
• Fertility benefits
• Complete list of benefits here

CLA is growing and seeking to hire an experienced Lead Identity & Access Management (IAM) Architect to join our Information Technology team. The position offers growth, flexibility and a collaborative work environment.

The Lead Identity & Access Management (IAM) Architect will be responsible for designing, implementing, and managing enterprise identity solutions. This role ensures and drives secure, scalable, and efficient identity and access management (IAM) across cloud and on-premises environments.

• Lead the design and implementation of identity solutions including hybrid identity with on-premise Active Directory.
• Architect secure authentication and authorization processes.
• Oversee design and implementation of Conditional Access, MFA, and Identity Protection policies.

• Integrate third-party and internal applications for Single Sign-On (SSO).
• Configure and manage directory synchronization and password hash synchronization.
• Lead CIAM (Customer Identity and Access Management) implementations.

• Deploy and manage privileged access accounts.
• Implement Identity Governance policies including access reviews, entitlement management, and lifecycle workflows.

• Lead migration projects from legacy IAM systems.
• Support application onboarding and modernization efforts.

Provide technical mentorship and leadership to junior team members.

• Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.
• 6 years relevant IT experience is required
• Hands on experience with IAM technologies and frameworks

• Proficiency with Microsoft Entra , Active Directory, and IAM best practices.
• Experience with Dev Ops tools (Terraform) and scripting (Power Shell, Bash, etc.).
• Experience with Identity Governance tools (e.g., SailPoint)

This position requires