Identity and Access Management Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Gain a comprehensive understanding of each client's business processes, security policies, and compliance requirements to craft IAM solutions that fulfill client goals.

• Design and implement scalable, secure IAM architectures that encompass access control, authentication, and identity management.

• Stay updated on IAM tools and solutions, evaluating their effectiveness, and providing recommendations.

• Perform IAM assessments to identify risks and vulnerabilities, and propose remediation strategies.

• Collaborate with clients to develop IAM policies and procedures that adhere to regulatory requirements and align with their business objectives.

• Offer technical guidance and support throughout all stages of requirements gathering, design, implementation, and post-implementation.

⛳️ Requirements

• Prior experience working in or with higher education institutions is highly preferred.

• Over 5 years of experience in Identity and Access Management consulting.

• Bachelor's degree in Computer Science, Computer Engineering, or a related field (industry experience may substitute for degree).

• Proven experience in developing and implementing IAM architectures, including access control, authentication, and identity management.

• Familiarity with IAM technologies and solutions such as Active Directory, LDAP, SSO, and multi-factor authentication, along with their advantages and disadvantages.

• Strong analytical and problem-solving abilities.

• Exceptional written and verbal communication skills.

• Capacity to work both independently and collaboratively within a team, while managing multiple clients and projects simultaneously.

• Expertise in SAML and CAS for configuring services, managing, and troubleshooting IdP (user store, claim configuration), as well as managing certificates.

• Experience with IdP solutions, including Ellucian Ethos Identity, WSO2 Identity Server, Shibboleth Identity Provider, Apereo CAS, QuickLaunch, PortalGuard, Entra ID, ADFS, and Okta.

• Proficiency with the LDAP protocol and experience working with directory servers (such as Active Directory, OpenDJ/Open LDAP, etc.) for configuration, deployment, and management.

• Familiarity with Ellucian Products & Single-Sign-On Configuration is preferred.

• Experience with Ellucian User Provisioning (EUP) is preferred.

• Extensive experience with IAM tools, including InCommon Trusted Access Platform, Shibboleth, Grouper, Midpoint, Comanage, Microsoft Identity Manager, and Entra ID is preferred.

• Technical skills in Java and Java Server Pages are preferred.

• Knowledge and experience with various multi-factor authentication (MFA) products for designing, testing, and deploying solutions based on client needs is preferred.

• Familiarity with the SPML framework is beneficial.

• Experience working with RESTFUL APIs is advantageous.

• CIAM, CISSP, or CISM certifications are highly valued.

🏝️ Benefits

• Remote work option (with potential travel for onsite client meetings)

• Flexible working hours

• Annual performance bonus

• Comprehensive medical, vision, and dental coverage

• Flexible spending and health savings accounts

• Paid time off, sick leave, and holiday pay

• Life insurance coverage

• Retirement plan with 401(k) and 5% employer contributions

• Opportunities for professional development

• Monthly connectivity stipend