Identity and Access Management Engineer- Senior Consultant

Your Journey at Crowe Starts Here:

At Crowe, you can build a meaningful and rewarding career. With real flexibility to balance work with life moments, you’re trusted to deliver results and make an impact. We embrace you for who you are, care for your well-being, and nurture your career. Everyone has equitable access to opportunities for career growth and leadership. Over our 80-year history, delivering excellent service through innovation has been a core part of our DNA across our audit, tax, and consulting groups. That’s why we continuously invest in innovative ideas, such as AI-enabled insights and technology-powered solutions, to enhance our services. Join us at Crowe and embark on a career where you can help shape the future of our industry.

Job Description:

What It Means to Be a Consultant at Crowe

Consulting is a dynamic business focused on solving problems for our clients and serving our core markets through innovative solutions. As technology and AI continue to reshape the consulting landscape, we are looking for individuals who are curious, adaptable, and eager to learn. At Crowe, consultants are expected to build both technical and transferable skills, think critically, and use technology to solve real business problems. In this role, you will continuously learn, collaborate across teams, and explore how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes.

As you grow, you’ll also begin to take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Developing a sense of account leadership, including understanding client needs, ensuring delivery excellence, and building trusted partnerships, is part of what sets successful consultants apart.

Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence.

About the Role

We are seeking a Senior Consultant, Identity and Access Management to join our Cybersecurity practice. This is a blended business analysis, technical analysis, and solution delivery role. It is well suited to someone who can understand how identity processes affect the business, translate stakeholder needs into clear requirements and solution designs, and contribute hands-on to implementation when needed.

This is not solely an engineering position. The successful candidate will bring broad IAM knowledge, strong analytical and client-facing skills, and sufficient engineering ability to understand configurations, integrations, identity data flows, and technical constraints. This person should be comfortable moving between stakeholder interviews, process analysis, requirements development, solution documentation, testing, troubleshooting, and targeted configuration or automation work.

You will partner with client stakeholders and Crowe delivery leaders to assess current-state identity capabilities, define business and technical requirements, design practical solutions, and help delivery teams implement and adopt those solutions. You will facilitate workshops, analyze processes and identity data, produce client-ready deliverables, support technical implementation, and communicate effectively with both business and technical audiences.

IAM will be the primary domain for this position. As a Senior Consultant within Crowe's Cybersecurity practice, however, you will also be expected to contribute to adjacent cybersecurity engagements - such as risk assessments, IT control evaluations, GRC initiatives, security program assessments, and cloud security reviews - as client demand and practice needs require.

This role is well suited to a candidate who enjoys connecting business needs with technology, has worked across multiple IAM domains or platforms, and can contribute throughout the delivery lifecycle - from discovery and requirements through design, testing, implementation, and adoption.

Key Responsibilities

Business and Technical Analysis

• Facilitate stakeholder interviews, discovery sessions, and working meetings to understand business objectives, identity processes, user needs, technology constraints, and security requirements.
• Document current-state and future-state IAM processes, including identity lifecycle events, access requests, approvals, provisioning, access reviews, authentication, and privileged access.
• Translate business needs into clear functional requirements, technical requirements, user stories, process flows, use cases, and acceptance criteria.
• Analyze identity data, access models, business roles, policies, workflows, and controls to identify gaps, risks, dependencies, and improvement opportunities.
• Develop requirements traceability matrices, process documentation, functional designs, decision logs, test scenarios, and other client-ready delivery materials.
• Evaluate solution options and help clients understand business impacts, technical tradeoffs, implementation considerations, and delivery risks.
• Support the development of IAM strategies, roadmaps, operating models, and remediation plans.
• Translate technical findings and recommendations into clear business language for client stakeholders.

IAM Solution Delivery and Engineering

• Support the design, configuration, testing, and deployment of IAM capabilities across identity governance, access management, authentication and authorization, privileged access, and identity lifecycle management.
• Translate approved business and technical requirements into implementable solution designs and configuration specifications.
• Work with technical teams to integrate IAM platforms with enterprise applications, directories, APIs, data sources, and workflow systems.
• Support identity data mapping, interface analysis, integration testing, data validation, and troubleshooting.
• Perform appropriate hands-on delivery activities, such as platform configuration, workflow or policy setup, report creation, data analysis, test execution, API testing, and basic scripting or automation.
• Apply working knowledge of authentication and authorization approaches, including SSO, MFA, passwordless authentication, RBAC, and ABAC.
• Support user acceptance testing, requirements validation, defect triage, remediation tracking, and production-readiness activities.
• Help onboard applications and business units to IAM capabilities, including requirements gathering, access-model definition, configuration support, testing, documentation, and enablement.
• Conduct or support IAM assessments, configuration reviews, control evaluations, and maturity assessments.
• Help ensure solutions align with relevant cybersecurity frameworks, regulatory requirements, and control expectations.

Client Delivery and Team Contribution

• Manage assigned workstream activities, deliverables, dependencies, risks, and deadlines with guidance from engagement leadership.
• Provide clear status updates and identify delivery issues early, escalating risks and decisions when appropriate.
• Participate in and facilitate client workshops, design sessions, status meetings, knowledge-transfer sessions, and stakeholder presentations.
• Collaborate across business, security, cloud, application development, technology risk, and compliance teams.
• Build trusted working relationships with client stakeholders and identify opportunities where Crowe can address additional business or security needs.
• Mentor and support consultants and other junior team members by reviewing work, sharing knowledge, and providing day-to-day guidance.
• Contribute to proposals, practice materials, training, reusable delivery assets, and service offering development.

Broader Cybersecurity Contribution

• Support cybersecurity engagements outside IAM, including risk assessments, IT control evaluations, GRC initiatives, security program maturity assessments, and cloud security reviews, when client demand or practice needs require.
• Apply business analysis, control analysis, testing, documentation, and stakeholder-management skills across different cybersecurity engagement types.
• Maintain sufficient knowledge of adjacent cybersecurity disciplines to work effectively across IAM, risk, compliance, cloud, and technology-control teams.

Basic Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, Business, or a related field.
• Three to five years of experience in IAM, cybersecurity consulting, business systems analysis, or a related technology-delivery role.
• Experience gathering requirements, facilitating stakeholder workshops, analyzing processes, and producing clear functional or technical documentation.
• Working knowledge across multiple IAM domains, such as identity governance, access management, authentication and authorization, identity lifecycle management, or privileged access.
• Hands-on experience with at least one major IAM platform, sufficient to support configuration, testing, troubleshooting, data analysis, or integration activities.
• Working knowledge of identity standards, APIs, identity data flows, and basic scripting, query, or automation techniques.
• Strong client-facing communication skills and experience managing assigned workstreams, deliverables, and deadlines.
• Ability to contribute to cybersecurity engagements outside IAM when client and practice needs require.

Preferred Qualifications

• Experience in a professional services, consulting, or advisory environment.
• Experience supporting both IAM analysis or assessment work and technical implementation.
• Experience working across multiple IAM platforms, cloud environments, or regulated industries.
• Experience with adjacent cybersecurity work, such as technology risk, IT controls, GRC, or cloud security.
• Familiarity with AI and automation or non-human identity considerations.
• Relevant IAM, business analysis, cloud, or cybersecurity certifications.

#Hybrid

We expect the candidate to uphold Crowe’s values of Care, Trust, Courage, and Stewardship. These values define who we are. We expect all of our people to act ethically and with integrity at all times.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Crowe is not sponsoring for work authorization at this time.

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Crowe, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $80,500.00 - $159,300.00 per year.

Our Benefits:
Your exceptional people experience starts here. At Crowe, we know that great people are what makes a great firm. We care about our people and offer employees a comprehensive total rewards package. Learn more about what working at Crowe can mean for you!

How You Can Grow:
We will nurture your talent in an inclusive culture that values diversity. You will have the chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations. Learn more about where talent can prosper!

More about Crowe:
Crowe provides professional services through two separate entities: Crowe LLP delivers audit and attest services, and Crowe Advisory LLC provides tax, advisory, consulting, and other nonattest services.

The Crowe Global network consists of more than 300 independent accounting and advisory services firms in more than 150 countries around the globe, making it one of the largest accounting networks in the world*. As independent members of Crowe Global, Crowe LLP and Crowe Advisory LLC serve clients worldwide. (*As of July 2026)

Crowe LLP and Crowe Advisory LLC (and their respective subsidiary entities) provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, sexual orientation, gender identity or expression, genetics, national origin, disability or protected veteran status, or any other characteristic protected by federal, state or local laws.

Crowe LLP and Crowe Advisory LLC (and their respective subsidiary entities) does not accept unsolicited candidates, referrals or resumes from any staffing agency, recruiting service, sourcing entity or any other third-party paid service at any time. Any referrals, resumes or candidates submitted to Crowe, or any employee or owner of Crowe without a pre-existing agreement signed by both parties covering the submission will be considered the property of Crowe, and free of charge.

Crowe will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act.

Please visit our webpage to see notices of the various state and local Ban-the-Box laws and Fair Chance Ordinances, where applicable.

We are committed to a merit-based hiring process, evaluating all candidates consistently using objective, job-related criteria such as relevant experience, demonstrated skills, measurable impact, and alignment with the role’s responsibilities, and making employment decisions in a fair and inclusive manner free from discrimination.

If you are interested in applying for employment with Crowe and are in need of an accommodation or require special assistance to navigate our website or to complete your application, please visit our Applicant Assistance and Accommodations page for more information: