Senior Identity Access Management Engineer - Ping

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you.

CLA is dedicated to building a culture that invites different beliefs and perspectives to the table, so we can truly know and help our clients, communities, and each other.

CLA is growing and seeking to hire an experienced Identity & Access Management (IAM) Senior Engineer to join our talented Information Technology team. The position offers growth, flexibility and a collaborative work environment.

The Identity & Access Management (IAM) Senior Engineer will be responsible for planning and executing programs both in the cloud and on premises.

• Executes the implementation and maintenance of complex Identity & Access Management (IAM) infrastructure.
• Responsible for the planning and execution of projects and programs from an IAM perspective, ensuring they meet business requirements, security standards and deadlines.
• Automate and optimize IAM processes.
• Integrate Entra  enterprise systems and third‑party applications.
• Collaborate with cross‑functional teams to support and drive IAM program goals.
• Monitor and troubleshoot IAM infrastructure, ensuring optimal performance, reliability and security.
• Document and maintain comprehensive IAM infrastructure designs and processes.
• Implement and enforce best practices for IAM security, compliance and governance.
• Mentor junior team members.
• Participate in an on‑call rotation.

• 4 years of relevant experience required.
• Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.
• Degrees in Computer Science, Information Technology, or a related field are preferred.
• Hands on experience with IAM technologies and frameworks.
• Ping platform level administration including Davinci orchestration, experience to register the application in Ping.
• Entra , scripting (Python or Bash), Azure Active Directory, and Power Shell. Knowledge of SAML, OAuth, and OpenID Connect. Experience with Role‑Based Access Control (RBAC).
• Experience with Entra B2B, Entra External Identity, JWT, API.

Protected Veterans. Individuals with Disabilities.

To support our CLA family members, we focus on their physical, financial, social, and emotional well‑being and offer comprehensive benefit options that include health, dental, vision, 401(k) and much more.