Senior Identity Access Management Engineer (IT Services)

About Charles River Associates

Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations and governments around the world. CRA advises clients on economic and financial matters pertaining to litigation and regulatory proceedings, and guides corporations through critical business strategy and performance-related issues. Since 1965, clients have engaged CRA for its combination of industry experience and rigorous, fact-based analysis that provide clients with clear, implementable solutions to complex business concerns.

Position Overview

The Information Technology (ITS) team at CRA is currently a Global team of 40 professionals dedicated to enhancing, maintaining, and developing the firm's technology infrastructure and security. The team is comprised of four functions: Service Delivery & Telecom, Enterprise Application Solutions, Infrastructure, Networking and Cloud Services and Security. Information Technology staff are based in the Boston, Chicago, London, Munich, New York, Oakland, and Washington, DC offices. Mainly a Microsoft house, CRA is looking to maximize the performance of our on-premise systems and hybrid infrastructure, meaning experience with cloud technologies is essential for this role.

The Senior Identity Access Management Engineer is responsible for the design, implementation, and operational support of enterprise identity and access management solutions with a primary focus on the Microsoft Entra platform. This role serves as the subject matter expert (SME) for identity security, privileged access management, identity governance, and non-human identities (NHIs), ensuring secure and compliant access to enterprise resources across hybrid and cloud environments. This position plays a key role in advancing CRA's hybrid cloud strategy through Identity platform standardization, identity governance, and assist in automation-first operational workflows/practices.

As an IAM Engineer you will help drive the adoption of Microsoft security best practices and modern identity architectures, leveraging Microsoft Entra ID, Entra ID Governance, Privileged Identity Management (PIM), Conditional Access, Identity Protection, and related Microsoft security services. Coordination across other teams within the IT department and across the firm, and some travel to other CRA offices will be expected. Some out-of-hours and weekend work will be required for scheduled upgrades and in response to unexpected outages. Typical responsibilities include:

Identity Platform Engineering

• Design, implement, and maintain enterprise identity solutions across Microsoft Entra ID, Active Directory, and hybrid identity environments • Architect secure authentication and authorization services leveraging Entra ID, Conditional Access, Identity Protection, MFA, and Privileged Identity Management (PIM)