Identity Management Consultant

We are seeking a highly skilled IAM & PAM professional with 8-12 years of experience in Identity Governance, Privileged Access Management, and Identity Security. The candidate should possess deep hands-on expertise in Saviynt IGA, BeyondTrust, CyberArk, and Microsoft Entra ID, with proven experience in enterprise-scale deployments, operational management, architecture design, and security governance.

The role is responsible for IAM/PAM operations, managing IAM Center of Excellence (CoE) activities, driving identity transformation initiatives, improving the identity security posture and ensuring audit readiness

Qualification

• Bachelor's degree in Computer Science, Information Security, or related field.
• Saviynt Certified Engineer / Administrator
• CyberArk Defender / Sentry certification
• BeyondTrust Certified Professional
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• CIAM, ISO 27001 Lead Implementer / Lead Auditor

Role Summary

• 8-12 years of overall experience in IAM, IGA, PAM, directory services, or identity security
• Hands-on experience in IGA (Saviynt, SailPoint), PAM (BeyondTrust, CyberArk) and Microsoft Entra ID (Azure AD) is required for managing enterprise identity and access solutions.

Key Responsibilities

. Identity Governance & Administration - Saviynt

• Design, implement, administer, and support Saviynt Identity Governance solutions.
• Configure and manage Joiner-Mover-Leaver (JML) lifecycle processes, birthright access, Role-Based Access Control (RBAC), access requests and approvals, access certifications and campaigns, Segregation of Duties (SoD), and identity analytics.
• Develop and maintain Saviynt workflows, rules, connectors, jobs, reports, analytics, and custom integrations.
• Lead application onboarding using REST APIs, LDAP, JDBC, SCIM, Active Directory, and custom connectors.
• Automate provisioning, modification, de-provisioning, reconciliation, and access review processes.
• Support governance, risk, compliance, and audit requirements, including remediation of access-related findings.

2. Privileged Access Management – BeyondTrust, CyberArk

BeyondTrust

• Administer Password Safe.
• Configure privileged account discovery, onboarding, credential rotation, session monitoring, recording, and reporting.
• Integrate BeyondTrust with identity providers, SIEM, ITSM, and enterprise applications.

CyberArk

• Design, implement, administer, and support CyberArk PAM solutions.
• Manage Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Central Policy Manager (CPM), Privileged Threat Analytics (PTA), and secrets management capabilities.
• Onboard privileged, service, database, infrastructure, and application accounts.
• Implement password rotation, credential reconciliation, session isolation, recording, and privileged access workflows.
• Perform platform health checks, upgrades, patching, backup validation, disaster recovery testing, and capacity planning.

3. Microsoft Entra ID & Identity Security

• Design, administer, and support enterprise Microsoft Entra ID environments.
• Implement and manage Conditional Access, multifactor authentication, passwordless authentication, Windows Hello for Business, Temporary Access Pass, Identity Protection, Privileged Identity Management, Entitlement Management, Access Reviews, and B2B collaboration.
• Configure enterprise application integrations using SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, and federation services.
• Develop automation using Microsoft Graph API, PowerShell, Azure Automation, and Logic Apps.
• Troubleshoot authentication, authorization, federation, token, provisioning, and Conditional Access issues.

Operational Activities - Run & Support

Operations Activities

• Monitor scheduled jobs, workflows, connectors, reconciliations, provisioning queues, certification campaigns, vault operations, session services, and platform alerts.
• Investigate and resolve access request, provisioning, authentication, SSO, federation, Conditional Access, password rotation, vaulting, and privileged session issues.
• Perform privileged account, service account, and application secret onboarding and lifecycle support.
• Handle incidents, service requests, problem records, change requests, and escalations within agreed service levels.
• Review privileged activity, anomalous access, failed logins, policy violations, and high-risk events in coordination with SOC and incident response teams.

Platform Administration

• Monitor infrastructure and application health, availability, capacity, performance, certificates, licenses, integrations, and dependencies.
• Maintain connectors, agents, gateways, APIs, directory integrations, service accounts, and scheduled tasks.
• Plan and execute patches, upgrades, hotfixes, configuration changes, backup validation, restoration tests, and disaster recovery drills.
• Maintain platform documentation, configuration baselines, standard operating procedures, architecture diagrams, and support runbooks.
• Perform periodic access reviews for platform administrators and validate break-glass and emergency access controls.

IAM Professionals aligned with our ongoing initiatives around IAM transformation, Zero Trust, and enterprise access governance. can reach me at [HIDDEN TEXT] OR [phone removed].