Job#: 2027416

Job Description:

CS - Senior Consultant - Identity Access Management
The position:
Apex is searching for a skilled professional with excellent consultative abilities to assume the position of a Senior Consultant in Identity Services. This role will serve as an identity engineer at Apex, collaborating with internal and client project teams to design and implement identity solutions and governance processes for our clients based on direction from Lead Consultant. The Senior Consultant may also provide technical support for Apex sales, solution management, and account teams during the scoping of new identity opportunities.

Responsibilities:

• Experience in managing various parts of identity and governance projects, including requirement gathering, solution design supporting the Lead's directives, development, implementation, testing, and deployment using identity platforms such as SailPoint, Saviynt, Okta, Ping Identity, CyberArk, HashiCorp, AzureAD etc.
• Based on project design scope, assist in implementing comprehensive identity governance and administration processes, including access request, provisioning/de-provisioning, role management, access certification, and policy enforcement across various Identity platforms.
• Assist in assessments of the clients existing identity infrastructure, identify risks, growth opportunities and vulnerabilities, and recommend executable strategies.
• Create customer delivery documentation such as implementation and configuration documents, test plans and run books.
• With direction from the Lead, establish and provide metrics that provide visibility into the performance and efficiency of our customers identity ecosystem.
• With direction from the Lead, establish and enforce identity governance policies, standards, and procedures to ensure compliance with industry regulations.
• Collaborate with auditors and stakeholders during compliance audits to provide documentation and support.?
• Collaborate with cross-functional teams, including security, IT operations, and application teams, to ensure seamless integration of Identity solutions.
• Foster a culture of innovation, collaboration, and continuous improvement within the Identity team.
• Maintain awareness of new and emerging trends and technologies in the Identity space, evaluate and recommend new Identity technologies, strategies, and enhancements.

Experience:

• 5 years' experience and expertise in implementing and developing enterprise-wide identity implementations around access governance, management of identities, attestation programs and identity policy management.
• Specific development and implementation experience with SailPoint IdentityNow and IdentityIQ.
• Experience with identity services, APIs and frameworks in cloud environments such as Microsoft Azure, Amazon Web Services, or Google Cloud Platform.
• Preferred experience implementing and configuring PAM tools such as CyberArk, HashiCorp, and Delinea.
• Development of governance and technical documentation with consideration of security controls, best practices, compliance, and regulatory frameworks.
• Collaborate with cross-functional teams to gather requirements, assess system impacts, and ensure successful identity platform deployments.
• Establish frameworks for periodic attestation schedules, policy controls and Separation of Duties (SoD).
• Experience in developing expiring access policies, and conforming business and technical role policies.
• Develop top-down and bottom-up roles (RBAC) for assignment of access, birthright, and identity changes to manage access risk.
• Preferred experience implementing and configuring PAM tools such as CyberArk, HashiCorp, and Delinea.
• Preferred experience Implementing MFA/SSO solutions, including using tools like PingID, Duo, Azure MFA, Okta, Google Authenticator, and/or RSA SecurID.
• Strong level communication and facilitation skills across technical and non-technical stakeholders.
• Excellent written and verbal communications skills including demonstrated proficiency in clearly communicating technical concepts to non-technical audiences in business terminology.
• Ability to maintain a high degree of professionalism in all client communications.
• Ability to influence others, build relationships, and manage conflicts.
• Highly motivated, consultative, problem-solving mindset.
• Brief management, as needed, on the status of action items and/or results of these activities.

Technical Requirements:

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Relevant identity tool certifications (SailPoint, Saviynt, CyberArk, Okta, etc.).
• Proven experience as an IAM Engineer, and hands-on experience with SailPoint including design, configuration, and customization of workflows, rules, and connectors.
• Deep understanding of identity principles, concepts, and best practices, including access control, authentication, credential verification, provisioning, etc.
• Working knowledge of authentication technologies, standards, and protocols, such as SSO, OIDC, SAML, LDAP, OAuth, and SCIM.
• Experience onboarding authoritative sources and applications through various methods (e.g., custom APIs, flat files, etc.).
• Experience working with web technologies such as XML, SPML, Web Services (SOAP/REST), web and application servers.
• Familiarity with databases (such as Oracle, MSSQL, MySQL).
• Familiarity with programing languages with Python, BeanShell, or PowerShell.
• Preferred background with design and implementation of Single Sign On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) controls and platforms.
• Strong problem-solving skills, ability to analyze complex issues, and implement effective solutions.
• Excellent communication and interpersonal skills, with the ability to collaborate with cross-functional teams and lead technical discussions.

EEO Employer
Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.