Senior IAM Operations Engineer

At Kirkland & Ellis, we don’t just meet the standard for legal excellence — we set it. Our culture is built on teamwork, ingenuity and an unwavering commitment to continuous growth. We tackle the most sophisticated legal challenges with bold ideas and innovative solutions, powered by the exceptional experience and ambition of our 7,000+ people, including 4,000+ attorneys, across 23 offices worldwide.

Our dedicated professionals share our lawyers’ commitment to excellence and show up each day to do meaningful work that helps drive global business, investment and innovation forward.

• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent professional experience; CIAM, CISA, CISM, or CISSP certifications are a plus.
• Extensive experience in Identity & Access Management, including 7+ years of Active Directory administration and security.
• Authoritative understanding of Identity & Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication, and Identity Governance & Administration (IGA).
• Advanced experience with Azure Active Directory / Microsoft Entra, role-based access control (RBAC), Privileged Identity Management (PIM), Microsoft 365, and Intune.
• Experience with Delinea (Privileged Access Management) and/or Veza (Identity Governance) tools is a plus.
• Strong Power Shell scripting skills with the ability to read and understand code.
• Familiarity with Outlook/Exchange mail routing, Windows file and folder security, Distributed File System (DFS), and core networking concepts such as DNS, DHCP, IP addressing, and routing.
• Ability to handle privileged and sensitive information with discretion and confidentiality.
• Strong troubleshooting skills and a customer-focused approach, ideally within a legal or professional services environment.

As a Sr IAM Operations Engineer I, you’ll play a critical role in implementing, supporting, and evolving Customer and Enterprise Identity & Access Management (IAM) capabilities across Kirkland & Ellis’ technology landscape. This senior-level role blends hands‑on engineering with strategic thinking—reviewing current implementations, identifying opportunities for improvement, building roadmaps, and delivering enhancements that strengthen security, efficiency, and user experience across the firm.

• Lead and support the implementation, administration, and continuous improvement of enterprise and customer IAM platforms.
• Review existing IAM solutions, identify gaps or risks, and design improvements that enhance workflows, security, and scalability.
• Develop, maintain, and enforce IAM policies, standards, and procedures aligned with security and business needs.
• Partner with Security Governance, Risk Management, Human Resources and other teams to support identity‑related initiatives.
• Coordinate closely with Human Resources to ensure accurate, timely onboarding and off‑boarding of all personnel.
• Assist with administration and daily operations of directory, email, telephony, and related systems as they relate to user identity.
• Proactively inform and advise management on identity‑related incidents, risks, and preventative measures.
• Provide occasional technical support with a strong focus on troubleshooting, communication, and customer service.
• Collaborate with fellow engineers, share expertise, and contribute to efficient, well‑documented IAM solutions.

All employment decisions, including the recruiting, hiring, placement, training availability, promotion, compensation, evaluation, disciplinary actions, and termination of employment (if necessary) are made without regard to the employee’s race, color, creed, religion, sex, pregnancy or childbirth, personal appearance, family responsibilities, sexual orientation or preference, gender identity, political affiliation, source of income, place of residence, national or ethnic origin, ancestry, age, marital status, military veteran status, unfavorable discharge from military service, physical or mental disability, or on any other basis prohibited by applicable law.