Security Solutions Senior Consultant – Identity and Access Management (IAM)

Qualifications:

Required

• 4–8 years of experience in cybersecurity or enterprise IT with a clear focus on Identity and Access Management; must include hands-on implementation or operational experience with at least two IAM platform categories (IGA, PAM, or Access Management)
• Hands-on technical experience across IAM platforms and domains, including one or more of:
• IGA — SailPoint IdentityNow/IdentityIQ, Saviynt, Omada, or One Identity: platform configuration, lifecycle workflow design, access certification setup, connector integration, or role engineering
• PAM — CyberArk (Core PAS, EPM), BeyondTrust (Password Safe, Privilege Management), or Delinea/Thycotic: vault deployment, privileged account onboarding, session recording configuration, or just-in-time access setup
• Access Management — Okta, Ping Identity, Microsoft Entra ID, or ForgeRock: SSO configuration, MFA deployment, SAML 2.0/OIDC/OAuth integration, SCIM provisioning, or federation setup
• Cloud Identity — AWS IAM, Azure Entra ID, GCP IAM: policy design, role assignment governance, CIEM tool usage, or cloud-native access control review
• Directory Services — Active Directory administration, Entra ID, group policy, or directory integration with IAM platforms
• Working knowledge of IAM and security frameworks: NIST SP 800-53 (AC and IA control families), NIST CSF 2.0, NIST SP 800-207 (Zero Trust), ISO 27001/27002, MITRE ATT&CK credential access tactics, SOX ITGC access controls, and HIPAA or PCI DSS identity requirements
• Understanding of core identity concepts: joiner-mover-leaver lifecycle, least privilege, separation of duties, privileged access management, zero-trust identity, federation, and identity threat detection and response (ITDR)
• Demonstrated consulting delivery competencies, including:
• Structured discovery: ability to conduct current-state discovery interviews, gather technical evidence, manage information collection across workstreams, and synthesize findings into clear, structured outputs
• Gap analysis: experience assessing IAM program maturity against frameworks, documenting gaps, and prioritizing findings by risk and business impact
• Technical communication: ability to translate IAM findings and recommendations into clear written deliverables and verbal summaries for technical and working-level client audiences
• Workshop facilitation: participate in and contribute to discovery sessions, technical design sessions, and working-group meetings; begin developing the ability to facilitate independently
• Deliverable quality: consistent track record of producing accurate, well-structured client deliverables, assessment reports, gap registers, configuration documentation, and architecture diagrams, on time and to standard
• Engagement collaboration: work effectively within project teams; communicate status, risks, and issues proactively to the engagement lead; adapt to shifting priorities and client needs

Preferred

• Bachelor's degree in Computer Science, Information Security, or a related field
• Industry certifications demonstrating IAM knowledge: CISSP, CISM, CISA, Security+, or equivalent; vendor certifications from SailPoint, Okta, CyberArk, BeyondTrust, or Microsoft (SC-300, AZ-500) are a strong plus
• Experience in enterprise environments across financial services, healthcare, retail, manufacturing, or public sector, particularly where IAM intersects with regulatory compliance (SOX, HIPAA, PCI DSS, DORA)
• Prior consulting experience at a professional services firm, systems integrator, or equivalent client-facing advisory role
• Familiarity with pre-sales processes: SOW development, effort estimation, or proposal support

Key Competencies

• IAM technical depth and hands-on platform execution
• Delivery quality and individual accountability
• Clear technical communication, written and verbal
• Collaborative team contributor with a growth orientation

Success in this role means executing IAM deliverables with high quality and growing independence, building credibility with client teams through consistent technical performance, expanding platform depth and consulting skills, and contributing to a practice that clients trust and return to, while building toward the skills and experience required to step into a Lead Consultant role.

Want to learn