Security Solutions Lead Consultant – Identity and Access Management (IAM)

Qualifications:

Required

• 8–12 years of experience in cybersecurity with a sustained focus on Identity and Access Management; must include 5+ years in a senior consulting or technical leadership role with hands-on IAM platform implementation and client advisory experience
• Demonstrated experience serving as an IAM technical SME within pursuit or sales teams, with a track record of contributing to scoping, pricing, and winning consulting engagements
• Deep technical expertise across IAM domains, including:
• IGA — SailPoint IdentityNow/IdentityIQ, Saviynt, Omada, or One Identity: role engineering, access certification, SoD policy design, joiner-mover-leaver lifecycle management, connector architecture, and entitlement catalog design
• PAM — CyberArk (Core PAS, EPM, Conjur), BeyondTrust (Password Safe, Privilege Management), or Delinea/Thycotic: vault architecture, privileged account onboarding, session recording, just-in-time access, and least-privilege enforcement
• Access Management — Okta, Ping Identity (PingFederate, PingOne), Microsoft Entra ID, or ForgeRock: SSO architecture, adaptive MFA, SAML 2.0, OAuth 2.0, OIDC, SCIM provisioning, and federation design
• Cloud Identity — AWS IAM/IAM Identity Center, Azure Entra ID, GCP IAM, CIEM tools (Wiz, Ermetic, Sonrai): cloud entitlement governance, CIEM policy design, and cloud-native IAM patterns
• Directory Services — Active Directory (design, tiered admin model, hardening), Azure AD Connect, LDAP, and virtual directory architectures (Radiant Logic, Microsoft MIM)
• Working knowledge of identity and security governance frameworks: NIST SP 800-53 (AC and IA control families), NIST CSF 2.0, NIST SP 800-207 (Zero Trust Architecture), ISO 27001/27002, MITRE ATT&CK credential access and lateral movement tactics, SOX ITGC access control requirements, HIPAA Security Rule, PCI DSS, and DORA as it relates to identity resilience
• Practical understanding of the identity-security interplay across adjacent domains: application security (OAuth/OIDC, API security), identity threat detection and response (ITDR), endpoint and device trust, and privileged attack paths including credential compromise and lateral movement
• Demonstrated consulting delivery competencies, including:
• Structured discovery and assessment: design and execute current-state IAM discovery engagements, conduct stakeholder interviews and technical SME sessions, synthesize findings into clearly structured, actionable outputs
• Gap analysis and maturity evaluation: assess and communicate IAM program maturity across technology, process, governance, and organizational readiness dimensions against recognized frameworks; prioritize findings by business risk and identity risk impact
• Executive communication: translate complex IAM findings into clear, concise narratives for CISO and senior leadership audiences; adapt message depth and framing to technical and business stakeholders
• Workshop facilitation: design and lead executive workshops, IAM program kickoffs, cross-functional discovery sessions, and technical design sessions; drive alignment among stakeholders with competing priorities
• Roadmap and program planning: develop phased IAM execution roadmaps with initiative prioritization, dependency mapping, ROM estimates, and milestone sequencing aligned to client business constraints and risk objectives
• Deliverable excellence: consistent track record of producing client-ready IAM deliverables — assessments, maturity scorecards, gap registers, architecture recommendations, roadmaps, and program plans — that meet professional services quality standards
• Stakeholder and engagement management: manage complex, multi-stakeholder IAM engagements; navigate competing priorities, set and manage expectations, escalate risks appropriately, and sustain client trust through ambiguity
• Practice Development: Develop, maintain, and enhance IAM service offerings including methodologies, marketing content, deliverable templates, and practice capabilities
• Sales and Pipeline Management: Identify, shape, and drive IAM opportunities from initial discussions through proposals, SOW, fee estimation, level of effort, margins, leveraged team structures, and deal closure

Preferred

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field
• Advanced certifications: CISSP, CISM, CISA, CRISC, CCSP, or equivalent; vendor-specific certifications from SailPoint, Okta, CyberArk, Bey