Senior IAM Operations Engineer I
Role details
Job location
Tech stack
Job description
Are you passionate about designing, improving, and securing modern identity systems in a complex enterprise environment? As a Sr IAM Operations Engineer I, you'll play a critical role in implementing, supporting, and evolving Customer and Enterprise Identity & Access Management (IAM) capabilities across Kirkland & Ellis' technology landscape. This senior-level role blends hands-on engineering with strategic thinking-reviewing current implementations, identifying opportunities for improvement, building roadmaps, and delivering enhancements that strengthen security, efficiency, and user experience across the firm.
- Lead and support the implementation, administration, and continuous improvement of enterprise and customer IAM platforms.
- Review existing IAM solutions, identify gaps or risks, and design improvements that enhance workflows, security, and scalability.
- Develop, maintain, and enforce IAM policies, standards, and procedures aligned with security and business needs.
- Partner with Security Governance, Risk Management, Human Resources, and other teams to support identity-related initiatives.
- Coordinate closely with Human Resources to ensure accurate, timely onboarding and offboarding of all personnel.
- Assist with administration and daily operations of directory, email, telephony, and related systems as they relate to user identity.
- Proactively inform and advise management on identity-related incidents, risks, and preventative measures.
- Provide occasional technical support with a strong focus on troubleshooting, communication, and customer service.
- Collaborate with fellow engineers, share expertise, and contribute to efficient, well-documented IAM solutions.
Requirements
Do you have experience in Windows?, Do you have a Bachelor's degree?, * Bachelor's degree in Computer Science, Computer Engineering, or equivalent professional experience; CIAM, CISA, CISM, or CISSP certifications are a plus.
- Extensive experience in Identity & Access Management, including 7+ years of Active Directory administration and security.
- Authoritative understanding of Identity & Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication, and Identity Governance & Administration (IGA).
- Advanced experience with Azure Active Directory / Microsoft Entra, role-based access control (RBAC), Privileged Identity Management (PIM), Microsoft 365, and Intune.
- Experience with Delinea (Privileged Access Management) and/or Veza (Identity Governance) tools is a plus.
- Strong PowerShell scripting skills with the ability to read and understand code.
- Familiarity with Outlook/Exchange mail routing, Windows file and folder security, Distributed File System (DFS), and core networking concepts such as DNS, DHCP, IP addressing, and routing.
- Ability to handle privileged and sensitive information with discretion and confidentiality.
- Strong troubleshooting skills and a customer-focused approach, ideally within a legal or professional services environment.