Senior IGA Consultant, Identity Governance and Access Controls

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Analyze exports related to users, groups, roles, permissions, and service accounts.

• Reconcile technical access with the rationale for that access.

• Identify broad, outdated, direct, and conflicting access, documenting evidence for each case.

• Conduct role mining and create role and access matrices.

• Test controls for joiners, role changes, and leavers, ensuring the removal of old access where necessary.

• Draft clear findings that outline the system, affected access, supporting evidence, associated risks, and necessary decisions.

• Assist in access reviews and certifications to enable business owners to make well-informed decisions.

• Review privileged accounts, service accounts, and integration identities.

• Support access testing for Microsoft Entra ID, Active Directory, Microsoft 365, SharePoint, and related business systems.

• Maintain records of findings, evidence, and an implementation backlog.

• Assist in pilot testing and verify that completed changes align with the approved design.

• Collaborate with the Engagement Director and Principal IAM Consultant; the Principal IAM Consultant is responsible for the target access design and final technical assessment.

• Engage in screening and structured technical discussions based on real access scenarios.

⛳️ Requirements

• Strong recent experience in delivering identity governance or access control projects within complex organizations.

• Practical experience in analyzing users, groups, roles, permissions, and access grants.

• Hands-on experience with role mining and role-based access control.

• Background in designing or managing access reviews, certifications, and recertifications.

• Proven experience in testing controls for joiners, role changes, and leavers.

• Good working knowledge of Microsoft Entra ID and Active Directory.

• Familiarity with Microsoft 365 and SharePoint permissions.

• Experience in reviewing privileged accounts, service accounts, or integration access.

• Ability to write concise, evidence-based findings in plain English.

• Comfortable working independently using source records and recorded interviews.

• Based in the United Kingdom and available during UK business hours.

• Open to short, clearly defined assignments that may expand upon client approval.

• Strong advantage: experience in financial services, investment management, or other regulated industries.

• Strong advantage: familiarity with Snowflake or another cloud data platform.

• Strong advantage: experience with SailPoint, Saviynt, or another identity governance platform.

• Strong advantage: experience in segregation of duties analysis.

• Strong advantage: experience reviewing AI tools or connectors that can access company information.

• Strong advantage: relevant certifications in Microsoft identity, SailPoint, Saviynt, CISSP, CISM, or ISO 27001.

• Personal experience in analyzing access evidence and translating it into findings or role design; general project coordination or user administration alone is insufficient.

🏝️ Benefits

• Indicative daily rate ranging from £425 to £500, depending on the assignment and relevant experience.

• Fully remote working arrangement within the United Kingdom.

• Clear work orders, agreed-upon days, and defined outputs established before the commencement of each assignment.

• Direct access to both the Engagement Director and Principal IAM Consultant.

• Focused work addressing real access issues in regulated organizations.

• Opportunities for follow-on work in design, pilot delivery, access reviews, and ongoing governance.

• Timely payment based on agreed timesheets and completed work.