Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Senior Director, Identity and Access Management

Baker Tilly US509 open roles

Pay
$251,700 – $297,000 a year
Where
USA IL Chicago 800 W Fulton
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Director, Identity and Access ManagementBaker Tilly US · USA IL Chicago 800 W Fulton

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Baker Tilly US's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. Baker Tilly US postings stay open a median of 33 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.1%7 days
  4. 21.2%14 days
  5. 35.9%30 days
  6. 58.9%60 days
This job: posted yesterday

Baker Tilly US median: 33 days open

The posting

Overview

Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms.

Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram.

Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

Job Description:

Baker Tilly is hiring a The Senior Director, Identity and Access Management (IAM) for our Enterprise IT team. This leader will define and execute a modern identity strategy for a large, complex enterprise of more than 15,000 users; improve IAM maturity, reliability, automation, and user experience; and ensure identity services securely enable workforce, privileged, B2B, and B2C use cases across cloud and SaaS platforms. The role leads people, platforms, partners, and operational outcomes across a variety of identity and security technologies.

Responsibilities:

Set IAM strategy, architecture, and capability roadmap (25%)

  • Define the enterprise IAM strategy, target-state architecture, reference patterns, standards, and multi-year capability roadmap aligned to business, security, cloud, data, and application strategies.
  • Provide executive ownership for workforce identity, privileged access, identity governance, authentication, authorization, federation, external identity, machine/non-human identity, and directory services.
  • Translate business and regulatory requirements into sequenced investments, measurable maturity outcomes, and product/capability roadmaps with clear dependencies and benefits.

IAM engineering, platform modernization, and IaC (20%)

  • Lead IAM engineering across Microsoft Entra ID, Active Directory, SailPoint, Azure, AWS, Databricks, Salesforce, Workday, and supporting integration platforms.
  • Establish and scale Infrastructure as Code (IaC), policy-as-code, automated testing, CI/CD, reusable modules, version control, and environment promotion practices for identity platforms.
  • Drive modernization away from manual, one-off administration toward API-first, event-driven, automated, resilient, and observable identity services.
  • Ensure architecture and engineering patterns support high availability, disaster recovery, zero trust, least privilege, and secure-by-default implementation.

IAM operations, reliability, and service management (20%)

  • Own operational performance and service health for enterprise IAM services, including incident/problem management, monitoring, alerting, capacity, resilience, lifecycle management, and vendor support.
  • Establish measurable service levels, operational KPIs/KRIs, runbooks, on-call/escalation models, and continuous-improvement mechanisms.
  • Reduce operational toil and access-related risk through automation, self-service, proactive detection, root-cause elimination, and disciplined problem management.
  • Oversee joiner/mover/leaver execution and access lifecycle controls spanning Workday, SailPoint, Entra ID/Active Directory, SaaS applications, and cloud platforms.

IAM product/capability management and maturity (15%)

  • Operate IAM as an enterprise product/capability with defined customers, outcomes, roadmap, backlog, architecture guardrails, adoption measures, and lifecycle plans.
  • Assess current IAM maturity, establish target maturity levels, and lead sustained improvement across governance, technology, process, data quality, operating model, and user experience.Lead organizational and process change associated with MFA, passwordless authentication, access governance, privileged access, application onboarding, and modern identity standards.
  • Partner with Security, Enterprise Architecture, HR, Legal, Risk, Audit, application teams, and business leaders to drive adoption and resolve cross-functional ownership decisions.

Enterprise identity integration and external identity (10%)

  • Design and govern scalable identity patterns for an enterprise of more than 15,000 users, including employees, contingent workers, partners, clients, customers, service accounts, and non-human identities.
  • Lead B2B and B2C identity capabilities, federation, single sign-on, lifecycle integration, conditional access, and delegated administration across internal and external ecosystems.
  • Ensure identity is consistently integrated into Salesforce, Workday, Databricks, cloud platforms, enterprise applications, data platforms, and acquired or merged environments.

Leadership, AI-enabled IAM, risk, and governance (10%)

  • Build, lead, coach, and develop architecture, engineering, and operations teams; establish clear accountabilities and succession/capability plans.
  • Use AI and machine learning responsibly to improve IAM operations, access intelligence, anomaly detection, request fulfillment, support, access reviews, and decision quality while maintaining human oversight and control.
  • Own vendor/partner strategy, technology evaluation, commercial outcomes, audit readiness, and remediation of identity-related risks and control gaps.
  • Communicate IAM strategy, investment needs, risk posture, maturity progress, and operational health to executives and governance forums.

Qualifications

Education & Certifications/Licenses

  • Bachelor's degree in information technology, cybersecurity, computer science, engineering, business, or related field required; equivalent relevant experience may be considered.
  • Master's degree preferred.
  • Microsoft identity/security certification (e.g., Identity and Access Administrator, Cybersecurity Architect Expert).
  • SailPoint certification or equivalent identity governance certification.
  • Cloud architecture/security certification in Microsoft Azure and/or AWS.
  • CISSP, CISM, or comparable security/technology leadership certification.

Experience

  • 12+ years of progressive experience in identity and access management, cybersecurity, enterprise infrastructure/platform engineering, or closely related technology roles.
  • 5+ years leading managers and/or senior technical teams with accountability for architecture, engineering, and operations.
  • Proven leadership of IAM in a large enterprise environment supporting more than 15,000 users and complex employee, contractor, partner, customer, and application ecosystems.
  • Demonstrated implementation and modernization experience with Microsoft Entra ID, Active Directory, and SailPoint, including identity governance, SSO/federation, MFA/passwordless, conditional access, lifecycle management, and privileged access patterns.
  • Hands-on leadership experience integrating IAM with Workday as a workforce identity source and with Salesforce, Azure, AWS, Databricks, and other enterprise/cloud applications.
  • Proven implementation of Infrastructure as Code and CI/CD for identity/security platforms using tools such as Terraform, Bicep, PowerShell, Python, GitHub Actions, Azure DevOps, or equivalent.
  • Experience building and executing multi-year IAM roadmaps, improving IAM maturity, and leading enterprise-wide process and technology change.
  • Experience operating IAM as a product/capability with measurable outcomes, roadmaps, backlogs, lifecycle plans, service metrics, and stakeholder governance.
  • Experience designing and supporting B2B and B2C identity solutions, external identity/federation, and secure partner/customer access at scale.
  • Proven operational leadership across incident/problem management, reliability, service management, audit/control evidence, disaster recovery, and security remediation.

Preferred prior work experience

  • Mergers and acquisitions, tenant/domain consolidation, identity migration, and complex hybrid/cloud transformation.
  • Zero Trust architecture, phishing-resistant authentication, non-human identity, secrets management, and cloud entitlement management.
  • Regulated or audit-intensive environments with strong controls over access certification, segregation of duties, privileged access, and evidence management.
  • Use of AI/ML, automation, or intelligent operations to improve identity risk detection, access decisions, service experience, and operational efficiency.

The pay rate range for this job position is $251,700 to $297,000. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Baker Tilly US's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Baker Tilly US's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Baker Tilly US's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.