USA_Developer

Pay Rate Range: $53.57 - 55.14/hr.GBaMS ReqID: 10667211DeveloperJob Description:Identity & Access Management SMEOnsite/OffshoreThis role will be responsible for executing the end to end IAM assessment across cloud, on prem, and third party identity platforms.This role focuses on technical evaluation, control analysis, maturity assessment, and risk identification, ensuring IAM capabilities align with security best practices, regulatory expectations, and business needs.Key Responsibilities:IAM Assessment & Analysis•Conduct detailed technical assessments across:oAzure Entra ID (Azure AD) – authentication, conditional access, MFA, PIM, identity governanceoAWS IAM – roles, policies, permissions boundaries, federation, least privilegeoOn Prem Active Directory (ADUC) – group design, privileged access, GPOs, AD hygieneoCyberArk – PAM controls, vaulting, session management, privileged workflowsoPingID – authentication flows, MFA enforcement, integrationsoSailPoint – identity lifecycle management, access certifications, role modeling•Evaluate current IAM architecture against industry standards (e.g., Zero Trust, least privilege, NIST/ISO concepts).•Identify control gaps, design weaknesses, and security risks.Control & Process Evaluation•Assess identity lifecycle processes: joiner, mover, leaver (JML).•Review access request, approval, provisioning, recertification, and de provisioning processes.•Assess MFA, SSO, federation, and password policies.•Evaluate privileged access controls and segregation of duties (SoD).Risk & Recommendations•Document IAM risks with clear impact and likelihood.•Provide actionable remediation recommendations (short term and long term).•Define IAM maturity levels and target state architecture.•Align recommendations with business priorities and regulatory expectations.Required Skills & Experience•8+ years of experience in Identity & Access Management•(Preferable) Strong hands on expertise with:oAzure Entra ID (Azure AD)oAWS IAMoActive Directory (ADUC)oCyberArk PAMoPingIDoSailPoint (IIQ or ISC)•Strong understanding of:oZero Trust ArchitectureoPrivileged Access ManagementoIdentity Governance & Administration (IGA)Essential Skills:Azure Entra ID (Azure AD) authentication| conditional access| MFA| PIM| identity governance AWS IAM roles| policies| permissions boundaries| federation| least privilegeOnPrem Active Directory (ADUC) group design| privileged access| GPOs| AD hygieneCyberArk PAM controls| vaulting| session management| privileged workflowsPingID authentication flows| MFA enforcement| integrationsSailPointSkills: Digital : AWS Mobile Hub & AWS Mobile Services~Sailpoint~Cyber Ark~Microsoft IAM~Azure Data FactoryExperience Required: 10 & AboveSkills:CategoryNameRequiredImportanceExperienceSkillCategoryTest1_MNDigital : AWS Mobile Hub & AWS Mobile ServicesYes17+ years