USD 160000–185000/yr

Senior Technical Consultant - Identity and Access Management

ChicagoRemoteFull Timesenior

SecurityOtherTechnical ConsultantSap Qm Functional & Technical ConsultantSap Sd Functional & Technical ConsultantSap Wm/Mm Functional & Technical Consultant

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery,

Technical Tools

SecurityOtherTechnical ConsultantSap Qm Functional & Technical ConsultantSap Sd Functional & Technical ConsultantSap Wm/Mm Functional & Technical Consultant

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.

Sr. Technical Consultants collaborate with a diverse team of consultants with varying skills to meet and exceed client expectations through scoped engagements. They effectively support client engagements, onsite or remotely, by guiding them toward scoped objectives and troubleshooting to resolve project risks or issues. Sr. Technical Consultants contribute to engagements by executing project tasks, producing expected collateral, and presenting artifacts throughout an engagement.

Sr. Technical Consultants can also support business development activities alongside a sales specialist to help qualify client needs and expectations, demonstrate capabilities, and contribute to sales proposals.

Lastly, AHEAD Sr. Technical Consultants leverage their visibility and experience to contribute to the continuous improvement and maturation of in-practice service offerings and capabilities through thought leadership and mentorship.

Senior Technical Consultant (Identity Engagement Manager)This role is for a Senior Technical Consultant who is both technical and consultative, able to own Identity engagements with clients from start to finish. The Identity Engagement Manager will lead and deliver identity-focused engagements across workforce IAM, IGA, PAM, and access/entitlement governance, aligning strategy and implementation to client business and security outcomes. This is a multi-vendor role focused on delivering measurable identity outcomes, not a single-platform position.

Lead identity engagements from discovery through architecture, implementation, and closeout, ensuring delivery against scoped objectives.

Serve as a technical and consultative lead across workforce IAM, IGA, PAM, and access/entitlement governance.

Drive identity assessments, technical roadmaps, and implementation plans that align with business and security priorities.

Lead implementations and optimizations across leading identity platforms based on client needs and scope.

Support PAM initiatives, including privileged lifecycle controls, vaulting patterns, JIT access models, and access workflows.

Support governance initiatives, including access request workflows, access reviews/certifications, role and policy model improvement, and audit-ready outcomes where applicable.

Support access and entitlement visibility initiatives across SaaS, cloud, and data platforms where applicable.

Design and implement workforce identity capabilities, including SSO, MFA, conditional access, and lifecycle automation with modern federation patterns (SAML, OAuth, OIDC).

When in scope, plan and execute directory and cloud identity modernization efforts, including hybrid integration and migration activities.

Troubleshoot identity infrastructure issues and provide advanced technical support and guidance.

Develop identity policies, procedures, standards, and documentation; perform technical health checks across identity platforms and environments.

Contribute to business development by helping qualify identity needs and supporting proposals.

Mentor team members and contribute to the evolution of AHEAD identity service offerings.

5+ years of identity and access management experience across one or more of workforce IAM, IGA, PAM, and access/entitlement governance.

Consulting experience leading client identity engagements end-to-end is required, including discovery, requirements, solution design, delivery leadership, and executive-ready documentation.

In-depth knowledge of SSO, MFA, directory services, federation protocols, lifecycle automation, and cloud identity management.

Proven experience with complex provisioning/de-provisioning and identity lifecycle scenarios.

Familiarity with common security and compliance frameworks (e.g., SOX, HIPAA, GDPR).

Proficiency with RESTful APIs and scripting; ability to produce clear technical documentation.

Strong analytical, problem-solving, and project management skills.

Ability to mentor and lead within multi-workstream delivery.

Strong client-facing communication skills with the ability to translate technical identity concepts into actionable recommendations.

Certifications are required. Candidates must hold at least one current identity-related certification. We prioritize candidates with certifications aligned to Delinea and Microsoft Entra ID, followed by Okta, CyberArk, Veza, SailPoint, or comparable identity platforms.

The ideal candidate brings strong delivery experience with Delinea and strong experience with Microsoft Entra ID. Experience with Okta, CyberArk, Veza, and/or SailPoint is beneficial.

Experience delivering identity programs that span multiple platforms and identity domains (IAM/IGA/PAM/entitlement governance).