Identity and Access Management (IAM) Senior Consultant

<p><b>Job Description &amp; Summary</b></p><p></p><p></p><h2>About the Team</h2><p>We help integrate security elements efficiently and reliably into the technological units of the client's business. We provide assurance that any changes affecting the IT environment will be fundamentally safe and allow a quick return on the client's investment. The team, which focuses on identities, privileged access management, and cloud security, is part of our broader Cyber Security team.</p><p></p><h2>About the Manager</h2><p><a href="http://www.linkedin.com/in/martin-zbo%C5%99il-4a8693a7/" rel="noopener noreferrer" target="_blank">Martin Zbořil </a>is a leader of the Identity and Cloud Security team, and his major experience lies in cloud security. Within this area, Martin also finished his PhD study. Besides cloud security, he has extensive knowledge also of many other areas of cybersecurity. Martin builds a cross-functional team that includes the IAM area and cloud security with a strong focus on protection of data in the cloud. Martin pays great attention to upskilling and personal development which might be considered also as his hobby. In his personal life, he is a sports enthusiast and among his favorite sports belong football, golf, skiing, gym, cycling, tennis and many others.</p><p></p><h2>Job Description &amp; Summary</h2><p>As an IAM Consultant, you will leverage your consulting expertise to help clients <span>assess, </span>design, implement, and optimize Identity and Access Management (IAM) solutions, including Privileged Access Management (PAM). You will work closely with clients to understand their security needs, develop tailored IAM strategies, and ensure seamless integration with their existing IT environments. Key responsibilities are to:</p><ul><li><p>Participate in the IAM projects - from assessment and design to implementation and optimization.</p></li><li><p>Advise clients on IAM governance, <span>processes,</span> policies, and best practices.</p></li><li><p>Conduct workshops and stakeholder interviews to understand business needs and translate them into IAM solutions.</p></li><li><p>Design identity lifecycle processes (provisioning, de-provisioning, role management).</p></li><li><p>Support integration of IAM solutions with existing IT environments (including AD and cloud platforms).</p></li><li><p>Provide strategic recommendations for improving security posture and compliance.</p></li></ul><p></p><h2>Requirements of the role</h2><p>We do not expect that you will master all of this, but we value your interest and desire to develop in the following areas.</p><ul><li><p>4+ years of experience in IAM consulting or implementation.</p></li><li><p>Strong understanding of IAM principles, frameworks, and governance models.</p></li><li><p>Experience with identity lifecycle management and role-based access control (RBAC).</p></li><li><p>Experience or familiarity with Privileged Access Management (PAM) tools and strategies.</p></li><li><p>Knowledge of Active Directory and Microsoft Entra ID.</p></li><li><p>Understanding of security protocols such as LDAP, SAML, OAuth, Kerberos, OpenID Connect.</p></li><li><p>Understanding of multi-factor authentication (MFA), and single sign-on (SSO) implementations.</p></li><li><p>Interest in working on security compliance projects related to IAM.</p></li><li><p>Ability to analyse security risks related to IAM and propose effective mitigation strategies.</p></li><li><p>Excellent interpersonal, verbal, and written skills: ability to clearly and concisely articulate issues, alternatives, and recommendations.</p></li><li><p>Consistent, reliable, and professional personality with a sense of ownership, capable of working within international &amp; diverse teams.</p></li><li><p>Professional proficiency in English and Czech.</p></li></ul><p></p><p><u>Your advantages could be:</u></p><ul><li><p>Project management skills - leading projects from design through to implementation.</p></li><li><p>Certifications such as CISSP, CISM, or vendor-specific IAM certifications (e.g., from Microsoft, CyberArk, SailPoint etc.).</p></li><li><p>Experience with CyberArk, SailPoint and other technologies in the area of Privileged Access Management and Identity Management.</p></li><li><p>Experience with secrets management.</p></li><li><p>Understanding of Zero Trust architecture and its implementation in IAM solutions.</p></li><li><p>Proficiency in German language.</p></li></ul><p></p><h2><span>Our Benefits and Fun  </span></h2><ul><li><p>Concentrated experience and rapid career growth. It may sound like a platitude, but it really is. </p></li><li><p>Flexible working hours.</p></li><li><p>Fair salary plus paid overtime <span>and annual bonus. </span></p></li><li><p>Paid time off 20 + 5 days, 3 wellbeing days and 2 extra days off from the company at the end of the year. </p></li><li><p>High-end Ultrabook and iPhone with unlimited data. </p></li><li><p>Benefit program with 45.000 points that you can use