Identity Access Management Engineer

The Identity Access Management Engineer.is responsible for administering and enhancing identity and access management processes that support secure, compliant access to Firm systems, applications, and data. This role executes user provisioning, deprovisioning, access reviews, role maintenance, and documentation activities in accordance with Firm policies and security standards. The position exercises discretion and independent judgment when evaluating access requests, resolving exceptions, identifying control gaps, and recommending process improvements.

This role partners with Information Technology, People & Culture, Compliance, the Office of the CISO, the Office of General Counsel, and business stakeholders to maintain appropriate access controls, protect confidential information, and support operational and regulatory requirements. The position may require occasional alternative schedules, on-call support, weekend work, and moderate travel.

The Identity Access Management Engineer.is responsible for administering and enhancing identity and access management processes that support secure, compliant access to Firm systems, applications, and data. This role executes user provisioning, deprovisioning, access reviews, role maintenance, and documentation activities in accordance with Firm policies and security standards. The position exercises discretion and independent judgment when evaluating access requests, resolving exceptions, identifying control gaps, and recommending process improvements.

This role partners with Information Technology, People & Culture, Compliance, the Office of the CISO, the Office of General Counsel, and business stakeholders to maintain appropriate access controls, protect confidential information, and support operational and regulatory requirements. The position may require occasional alternative schedules, on-call support, weekend work, and moderate travel.

• Administers user access to internal and external systems, applications, and network-based resources
• Reviews, approves, coordinates, and completes provisioning, modification, and deprovisioning activities in accordance with Firm policies, access standards, and security requirements
• Evaluates access requests and exceptions using discretion and independent judgment to ensure appropriate authorization, segregation of duties, and least-privilege access
• Prepares and maintains documentation for operating standards, access standards, policies, and system access guides and procedures
• Identifies process gaps and control weaknesses and develop improvements for granting, modifying, and revoking access
• Performs periodic audits and access reviews to confirm compliance with approved access models, internal controls, and Firm requirements
• Develops and maintain access guides for applications supported by the Identity Access Management function and validate access configurations through testing
• Tests and supports identity and access management provisioning tools and related workflows
• Maintains and updates business rules, role structures, and automation logic within IAM tools
• Validates approvals, business justification, and supporting documentation before granting or modifying access
• Determines whether requested access aligns with least-privilege principles, segregation of duties requirements, and established security standards
• Assesses access-related risk considerations and identify exceptions before permissions are granted or modified
• Develops and maintains IAM policies, access standards, onboarding requirements, and governance documentation for applications introduced into the environment
• Partners with project teams, vendors, and business stakeholders to define identity lifecycle requirements,…