Senior Director, Identity and Access Management

Location: USA IL Chicago 800 W Fulton

Overview

Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards.

Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.

Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.

Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

Baker Tilly is hiring a The Senior Director, Identity and Access Management (IAM) for our Enterprise IT team. This leader will define and execute a modern identity strategy for a large, complex enterprise of more than 15,000 users; improve IAM maturity, reliability, automation, and user experience; and ensure identity services securely enable workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms. The role leads people, platforms, partners, and operational outcomes across a variety of identity and security technologies.

Responsibilities

Set IAM strategy, architecture, and capability roadmap (25%)

Define the enterprise IAM strategy, target-state architecture, reference patterns, standards, and multi-year capability roadmap aligned to business, security, cloud, data, and application strategies.

Provide executive ownership for workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine/non-human identity, and directory services.

Translate business and regulatory requirements into sequenced investments, measurable maturity outcomes, and product/capability roadmaps with clear dependencies and benefits.

IAM engineering, platform modernization, and IaC (20%)

Lead IAM engineering across Microsoft Entra ID, Active Directory, SailPoint, Azure, AWS, Databricks, Salesforce, Workday, and supporting integration platforms.

Establish and scale Infrastructure as Code (IaC), policy-as-code, automated testing, CI/CD, reusable modules, version control, and environment promotion practices for identity platforms.

Drive modernization away from manual, one-off administration toward API-first, event-driven, automated, resilient, and observable identity services.

Ensure architecture and engineering patterns support high availability, disaster recovery, zero trust, least privilege, and secure-by-default implementation.

IAM operations, reliability, and service management (20%)

Own operational performance and service health for enterprise IAM services, including incident/problem management, monitoring, alerting, capacity, resilience, lifecycle management, and vendor support.

Establish measurable service levels, operational KPIs/KRIs, runbooks, on-call/escalation models, and continuous-improvement mechanisms.

Reduce operational toil and access-related risk through automation, self-service, proactive detection, root-cause elimination, and disciplined problem management.

Oversee joiner/mover/leaver execution and access lifecycle controls spanning Workday, SailPoint, Entra ID/Active Directory, SaaS applications, and cloud platforms.

IAM product/capability management and maturity (15%)

Operate IAM as an enterprise product/capability with defined customers, outcomes, roadmap, backlog, architecture guardrails, adoption measures, and lifecycle plans.

Assess current IAM maturity, establish target maturity levels, and lead sustained improvement across governance, technology, process, data quality, operating model, and user experience.Lead organizational and process change associated with MFA, passwordless authentication, access governance, privileged access, application onboarding, and modern identity standards.

Partner with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders to drive adoption and resolve cross-functional ownership decisions.

Enterprise identity integration and external identity (10%)

Design and govern scalable identity patterns for an enterprise of more than 15,000 users, including employees, contingent workers, partners, clients, customers, service accounts, and non-human identities.

Lead B2B and B2C identity capabilities, federation, single sign-on, lifecycle integration, conditional access, and delegated administration across internal and external ecosystems.

Ensure identity is consistently integrated into Salesforce, Workday, Databricks, cloud platforms, enterprise applications, data platforms, and acquired or merged environments.

Leadership, AI-enabled IAM, risk, and governance (10%)

Build, lead, coach, and develop architecture, engineering, and operations teams; establish clear accountabilities and succession/capability plans.

Use AI and machine learning responsibly to improve IAM operations, access intelligence, anomaly detection, request fulfillment, support, access reviews, and decision quality while maintaining human oversight and control.

Own vendor/partner strategy, technology evaluation, commercial outcomes, audit readiness, and remediation of identity-related risks and control gaps.

Communicate IAM strategy, investment needs, risk posture, maturity progress, and operational health to executives and governance forums.

Education & Certifications/Licenses

• Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or related field required; equivalent relevant experience may be considered.
• Master's degree preferred.
• Microsoft identity/security certification (e.g., Identity and Access Administrator, Cybersecurity Architect Expert).
• SailPoint certification or equivalent identity governance certification.
• Cloud architecture/security certification in Microsoft Azure and/or AWS.
• CISSP, CISM, or comparable security/technology leadership certification.

Experience

• 12+ years of progressive experience in identity and access management, cybersecurity, enterprise infrastructure/platform engineering, or closely related technology roles.
• 5+ years leading managers and/or senior technical teams with accountability for architecture, engineering, and operations.
• Proven leadership of IAM in a large enterprise environment supporting more than 15,000 users and complex employee, contractor, partner, customer, and application ecosystems.
• Demonstrated implementation and modernization experience with Microsoft Entra ID, Active Directory, and SailPoint, including identity governance, SSO/federation, MFA/passwordless, conditional access, lifecycle management, and privileged access patterns.
• Hands-on leadership experience integrating IAM with Workday as a workforce identity source and with Salesforce, Azure, AWS, Databricks, and other enterprise/cloud applications.
• Proven implementation of Infrastructure as Code and CI/CD for identity/security platforms using tools such as Terraform, Bicep, PowerShell, Python, GitHub Actions, Azure DevOps, or equivalent.
• Experience building and executing multi-year IAM roadmaps, improving IAM maturity, and leading enterprise-wide process and technology change.
• Experience operating IAM as a product/capability with measurable outcomes, roadmaps, backlogs, lifecycle plans, service metrics, and stakeholder governance.
• Experience designing and supporting B2B and B2C identity solutions, external identity/federation, and secure partner/customer access at scale.
• Proven operational leadership across incident/problem management, reliability, service management, audit/control evidence, disaster recovery, and security remediation.

Preferred prior work experience

Mergers and acquisitions, tenant/domain consolidation, identity migration, and complex hybrid/cloud transformation.

Zero Trust architecture, phishing-resistant authentication, non-human identity, secrets management, and cloud entitlement management.

Regulated or audit-intensive environments with strong controls over access certification, segregation of duties, privileged access, and evidence management.

Use of AI/ML, automation, or intelligent operations to improve identity risk detection, access decisions, service experience, and operational efficiency.

The pay rate range for this job position is $251,700 to $297,000. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.

Additional Locations: USA WI Milwaukee, USA FL Tampa 100 South Ashley Dr, USA Remote, USA WA Seattle 999 Third Ave, Madison, WI