World Wide Technology Holding, LLC
Security Solutions Senior Consultant – Identity and Access Management (IAM)
- Compensation
- Not disclosed
- Location
- Anytown, Missouri, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Full time
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- 4–8 years of experience in cybersecurity or enterprise IT with a clear focus on Identity and Access Management; must include hands-on implementation or operational experience with at least two IAM pla
- Hands-on technical experience across IAM platforms and domains, including one or more of:
- IGA — SailPoint IdentityNow/IdentityIQ, Saviynt, Omada, or One Identity: platform configuration, lifecycle workflow design, access certification setup, connector integration, or role engineering
- PAM — CyberArk (Core PAS, EPM), BeyondTrust (Password Safe, Privilege Management), or Delinea/Thycotic: vault deployment, privileged account onboarding, session recording configuration, or just-in-tim
- Access Management — Okta, Ping Identity, Microsoft Entra ID, or ForgeRock: SSO configuration, MFA deployment, SAML 2.0/OIDC/OAuth integration, SCIM provisioning, or federation setup
- Cloud Identity — AWS IAM, Azure Entra ID, GCP IAM: policy design, role assignment governance, CIEM tool usage, or cloud-native access control review
- Directory Services — Active Directory administration, Entra ID, group policy, or directory integration with IAM platforms
- Working knowledge of IAM and security frameworks: NIST SP 800-53 (AC and IA control families), NIST CSF 2.0, NIST SP 800-207 (Zero Trust), ISO 27001/27002, MITRE ATT&CK credential access tactics, SOX
- Understanding of core identity concepts: joiner-mover-leaver lifecycle, least privilege, separation of duties, privileged access management, zero-trust identity, federation, and identity threat detect
Nice to have
- Bachelor's degree in Computer Science, Information Security, or a related field
- Industry certifications demonstrating IAM knowledge: CISSP, CISM, CISA, Security+, or equivalent; vendor certifications from SailPoint, Okta, CyberArk, BeyondTrust, or Microsoft (SC-300, AZ-500) are a
- Experience in enterprise environments across financial services, healthcare, retail, manufacturing, or public sector, particularly where IAM intersects with regulatory compliance (SOX, HIPAA, PCI DSS,
- Prior consulting experience at a professional services firm, systems integrator, or equivalent client-facing advisory role
- Familiarity with pre-sales processes: SOW development, effort estimation, or proposal support
Full description
Qualifications:
Required
- 4–8 years of experience in cybersecurity or enterprise IT with a clear focus on Identity and Access Management; must include hands-on implementation or operational experience with at least two IAM platform categories (IGA, PAM, or Access Management)
- Hands-on technical experience across IAM platforms and domains, including one or more of:
- IGA — SailPoint IdentityNow/IdentityIQ, Saviynt, Omada, or One Identity: platform configuration, lifecycle workflow design, access certification setup, connector integration, or role engineering
- PAM — CyberArk (Core PAS, EPM), BeyondTrust (Password Safe, Privilege Management), or Delinea/Thycotic: vault deployment, privileged account onboarding, session recording configuration, or just-in-time access setup
- Access Management — Okta, Ping Identity, Microsoft Entra ID, or ForgeRock: SSO configuration, MFA deployment, SAML 2.0/OIDC/OAuth integration, SCIM provisioning, or federation setup
- Cloud Identity — AWS IAM, Azure Entra ID, GCP IAM: policy design, role assignment governance, CIEM tool usage, or cloud-native access control review
- Directory Services — Active Directory administration, Entra ID, group policy, or directory integration with IAM platforms
- Working knowledge of IAM and security frameworks: NIST SP 800-53 (AC and IA control families), NIST CSF 2.0, NIST SP 800-207 (Zero Trust), ISO 27001/27002, MITRE ATT&CK credential access tactics, SOX ITGC access controls, and HIPAA or PCI DSS identity requirements
- Understanding of core identity concepts: joiner-mover-leaver lifecycle, least privilege, separation of duties, privileged access management, zero-trust identity, federation, and identity threat detection and response (ITDR)
- Demonstrated consulting delivery competencies, including:
- Structured discovery: ability to conduct current-state discovery interviews, gather technical evidence, manage information collection across workstreams, and synthesize findings into clear, structured outputs
- Gap analysis: experience assessing IAM program maturity against frameworks, documenting gaps, and prioritizing findings by risk and business impact
- Technical communication: ability to translate IAM findings and recommendations into clear written deliverables and verbal summaries for technical and working-level client audiences
- Workshop facilitation: participate in and contribute to discovery sessions, technical design sessions, and working-group meetings; begin developing the ability to facilitate independently
- Deliverable quality: consistent track record of producing accurate, well-structured client deliverables, assessment reports, gap registers, configuration documentation, and architecture diagrams, on time and to standard