Senior Identity Access Management Engineer - PingOne

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you. CLA is dedicated to building a culture that invites different beliefs and perspectives to the table, so we can truly know and help our clients, communities, and each other. CLA is growing and seeking to hire an experienced Identity & Access Management (IAM) Senior Engineer with PingOne experience to join our talented Information Technology team. The position offers growth, flexibility and a collaborative work environment. Identity & Access Management (IAM) Senior Engineer will be responsible for planning and executing programs both in the cloud and on premises. What you will do: Executes the implementation and maintenance of complex Identity & Access Management (IAM) infrastructure. Responsible for the planning and execution of projects and programs from an IAM perspective, ensuring they meet business requirements, security standards and deadlines. Automate and optimize IAM processes. Integrate Entra ID with enterprise systems and third‑party applications. Collaborate with cross‑functional teams to support and drive IAM program goals. Monitor and troubleshoot IAM infrastructure, ensuring optimal performance, reliability and security. Document and maintain comprehensive IAM infrastructure designs and processes. Implement and enforce best practices for IAM security, compliance and governance. Mentor junior team members. Participate in an on‑call rotation. What you will need: 4 years of relevant experience. Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree. Degrees in Computer Science, Information Technology, or a related field are preferred. Hands‑on experience with IAM technologies and frameworks. Technical competencies PingOne platform level administration including Davinci orchestration, experience to register the application in Ping. Entra ID, scripting (Python or Bash), Azure Active Directory, and PowerShell. Knowledge of SAML, OAuth, and OpenID Connect. Experience with Role‑Based Access Control (RBAC). Experience with Entra B2B, Entra External Identity, JWT, API. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities Wellness at CLA To support our CLA family members, we focus on their physical, financial, social, and emotional well‑being and offer comprehensive benefit options that include health, dental, vision, 401k and much more. #J-18808-Ljbffr CliftonLarsonAllen