IAM Operations Engineer II

About Kirkland & Ellis:
At Kirkland & Ellis, we don’t just meet the standard for legal excellence — we set it. Our culture is built on teamwork, ingenuity and an unwavering commitment to continuous growth. We tackle the most sophisticated legal challenges with bold ideas and innovative solutions, powered by the exceptional experience and ambition of our 7,000+ people, including 4,000+ attorneys, across 22 offices worldwide.

Our dedicated professionals share our lawyers’ commitment to excellence and show up each day to do meaningful work that helps drive global business, investment and innovation forward.

Are you ready to shape the future of secure, seamless identity access across a global law firm? As a IAM Operations Engineer II
, you’ll design, enhance, and implement Identity and Access Management (IAM) technologies that strengthen Kirkland & Ellis’ infrastructure and enable operational excellence. You’ll play a key role in evaluating current systems, identifying improvement opportunities, and executing updates that streamline workflows and bolster security.

• Design & Implementation: Lead the design, deployment, and enhancement of IAM technologies across the Firm’s infrastructure, including evaluation and rollout of new tools and features.
• System Administration: Manage the daily operation, maintenance, and performance of IAM, directory, email, and telephony systems related to user identity.
• Onboarding & Offboarding: Partner with Human Resources to manage user lifecycle processes, ensuring timely and secure access provisioning.
• Troubleshooting & Support: Collaborate with Firmwide Service Desk and Technology Support teams to diagnose and resolve incidents; occasionally provide direct end-user support with a focus on service excellence.
• Incident Management: Advise management on incident trends and prevention strategies to maintain a secure, resilient environment.
• Collaboration & Knowledge Sharing: Work closely with fellow engineers to share best practices, develop solutions efficiently, and maintain consistency across systems.

• Education: Bachelor’s degree in Computer Science, Computer Engineering, or equivalent experience.
• Experience: At least 5 years of hands‑on experience managing and securing Active Directory environments. Prior experience in a legal or professional services setting is a plus.
• Systems Knowledge: Working knowledge of Outlook/Exchange, Windows file/folder security, Distributed File System (DFS), DNS, DHCP, IP addressing, and general network routing.
• Professional
  
  Skills:
  
  Excellent troubleshooting, collaboration, and communication abilities, with a commitment to handling sensitive information confidentially.
• Software Proficiency: Microsoft Outlook, Word, and Excel required.

• Strong understanding of Microsoft Azure/Entra, including roles, Role-Based Access Control (RBAC), and Privileged Identity Management (PIM).
• Proficiency with Microsoft 365 (M365), Intune, and related technologies.
• Experience with Privileged Access Management (PAM) tools such as Delinea (preferred) or Cyber Ark.
• Familiarity with Identity Governance tools (Veza preferred).
• Advanced understanding of Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Authentication, Identity Governance & Administration (IGA) concepts.
• Skilled in Power Shell scripting and code reading.

Thank you for your interest in Kirkland & Ellis LLP. To complete an application and submit your resume, please click Apply Now.

Don't meet every job requirement? That's okay! If you're excited about this role but your experience doesn't perfectly fit every qualification, we encourage you to apply anyway. You may be just the right person for this role or others at Kirkland.

All employment decisions, including the recruiting, hiring, placement, training availability, promotion, compensation, evaluation, disciplinary actions, and termination of employment (if necessary) are made without regard to the employee’s race, color, creed, religion, sex, pregnancy or childbirth, personal appearance, family responsibilities, sexual orientation or preference, gender identity, political affiliation, source of income, place of residence, national or ethnic origin, ancestry, age, marital status, military veteran status, unfavorable discharge from military service, physical or mental disability, or on any other basis prohibited by applicable law.