IAM Consultant

Our client is an industry-leading global enterprise dedicated to innovation, sustainability, and digital transformation. Their core Security Operations division operates an elite, fully in-house Identity & Access Management team tasked with protecting critical digital assets, global infrastructure, and thousands of user endpoints worldwide.

They are seeking a Senior IAM Consultant who brings a blend of technical engineering depth, automation capability, and a proactive security mindset to help safeguard their expanding digital footprint.

Role Overview

As an IAM Consultant, you will serve as a technical subject matter expert within the core security organization. This is a balanced engineering, support, and automation role. You will be responsible for translating security requirements into functional IAM design configurations, resolving complex identity issues, and automating access lifecycles to reduce administrative overhead and security risk.

Key Responsibilities

• Identity Engineering & Support: Configure, maintain, and troubleshoot core enterprise identity solutions, including Active Directory, Microsoft Entra ID, Single Sign-On (SSO via Ping Identity or similar), and Public Key Infrastructure (PKI).
• Access Control & Governance: Design and enforce least-privilege security controls, including Multi-Factor Authentication (MFA), Conditional Access Policies, Privileged Access Management (PAM), and Identity Governance & Administration (IGA).
• Process Automation: Build scripts (PowerShell, Python, Ansible) and leverage modern CI/CD practices to automate identity provisioning, user onboarding/offboarding, and administrative workflows.
• API & System Integration: Partner with integration teams to connect identity services to enterprise applications via API gateways (such as APIGEE) and containerized microservices environments (Docker, Kubernetes).
• Identity Analytics & Risk Reduction: Perform continuous data analysis on access assignments to identify entitlement anomalies, eliminate security gaps, and deliver compliance reporting.
• Cross-Functional Collaboration: Serve as the IAM subject matter expert across various IT and business project initiatives, ensuring delivery aligns with broader organizational deadlines and security standards.

Must-Have Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent professional experience.
• Proven hands-on experience with Active Directory, Entra ID, MFA, Conditional Access, IGA, PAM, and PKI/Certificate Management.
• Solid understanding of SSO configurations using Ping Identity, Entra ID, or equivalent federation technologies (SAML, OAuth, OIDC).
• Strong scripting skills using PowerShell, Python, or Ansible to drive automated provisioning.
• Familiarity with version control (Git) and CI/CD pipelines.
• Excellent problem-solving abilities with a data-driven approach to detecting security gaps and anomalies.

Highly Desirable Skillsets (Nice-to-Haves)

• Experience with SAP Identity tools (SAP IAS / IPS).
• Exposure to Customer Identity and Access Management (CIAM) architecture.
• Working knowledge of API Gateways (APIGEE) and Containerization (Docker, Kubernetes).
• Relevant certifications: Microsoft Certified: Identity and Access Administrator Associate, Certified Omada Engineer, or similar industry credentials.