Identity and Access Management Engineer

Cooley is excited to announce an opportunity for an Identity and Access Management (IAM) Engineer to join our dedicated Security team. Position Summary: At Cooley Technology, we prioritize a culture of exceptional customer service. As an IAM Engineer, you will play a crucial role in designing, implementing, and managing secure, compliant, and scalable identity services. Your work will span across various systems, including Entra ID (Azure AD), Privileged Access Management, Active Directory, SSO/MFA/Conditional Access, Identity Governance, Cloud Identity (AWS), and Certificate Lifecycle Management. You will collaborate closely with Cybersecurity, Innovation and Technology teams, HR, and business stakeholders to deliver reliable identity solutions that protect our firm’s data and facilitate business operations. Key Responsibilities: Develop and manage IAM capabilities across provisioning, authentication, authorization, and identity lifecycle processes. Administer and enhance Microsoft Entra ID (Azure AD) and on-prem Active Directory, focusing on account lifecycle management, group/role administration, and directory hygiene. Implement and maintain Single Sign-on (SSO), Multi-Factor Authentication (MFA), and Conditional Access protocols, ensuring consistent authentication standards. Engineer and sustain identity integrations for SaaS and on-prem applications, including enterprise application configurations. Support the Privileged Access Management (PAM) program by onboarding privileged identities and implementing credential protection workflows. Execute identity governance workflows such as joiner/mover/leaver processes and access requests in collaboration with IAM leadership and Technology stakeholders. Develop cloud identity solutions with secure access patterns, adhering to firm standards and the principle of least privilege. Contribute to efforts in certificate lifecycle management, including inventory support and automation initiatives. Automate and standardize IAM operations through scripting or other workflows to enhance efficiency and reliability. Monitor IAM systems for issues or anomalies in partnership with Cyber Security and other Technology teams. Develop and maintain thorough documentation, procedures, and runbooks for IAM systems and integrations. Participate in on-call rotation and after-hours support as required. Perform additional tasks as needed. Skills & Experience Required: Proficiency in the Microsoft Office suite and relevant firm applications after orientation at Cooley LLP. Availability to work extended or weekend hours as needed. 4+ years of relevant IAM, directory, or authentication experience in an enterprise environment; 5+ years for senior level candidates. Hands-on experience in Entra ID (Azure AD) and Active Directory administration. Experience with SSO, MFA, and Conditional Access implementations. Familiarity with identity and access protocols such as SAML, OAuth, OpenID Connect, LDAP, and SCIM. Experience supporting Privileged Access Management workflows. Competence in cloud identity services, including roles and policies for human and workload identities. Strong troubleshooting skills for resolving complex IAM issues. Preferred Qualifications: Bachelor's degree in computer science, Information Systems, or a related field. Experience with PAM tools and identity governance. Familiarity with AWS IAM and cloud IAM patterns. Proficiency in PowerShell scripting for automation. Experience with CrowdStrike Identity Protection and Tenable Identity Exposure. Familiarity with SIEM solutions. Previous experience in a law firm or professional services environment. Relevant certifications such as CISSP, Azure, AWS, or other IAM-focused credentials. Competencies: Entrepreneurial mindset with strong analytical and problem-solving skills. Ability to prioritize tasks effectively in a dynamic environment. Clear communication skills with both technical and non-technical stakeholders. Attention to detail and accuracy in documentation and operational tasks. Adaptability to changing technologies and requirements. Capability to drive projects to completion. Strong team spirit and ability to work collaboratively. Cooley offers a competitive compensation package and excellent benefits, reflecting our commitment to fair and equitable employment practices. The expected annual pay range for this full-time position is $130,000 - $195,000, with potential for higher salaries for senior candidates based on experience. Benefits include medical, dental, vision insurance, paid time off, generous parental leave, and more. EOE. New employees will receive a comprehensive benefits orientation to better understand available resources.

Created: 2026-03-11