Digital Identity & IAM SME/Manager – Hybrid Consulting

EY; Palo Alto (CA); Remote; USD 144,900 - 265,800; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package (medical, dental

401(k) and pension

Job summary

EY is seeking a Digital Identity & Authentication SME to help clients design and implement robust identity solutions using Microsoft Entra, Okta, Ping, and Saviynt. You will shape IAM strategy, assess current states, and drive governance and risk reduction in hybrid cloud environments.

You will work with security, advisory teams and clients to deliver secure authentication workflows, access controls, and compliant IAM programs across Azure, AWS, and GCP.

Qualifications

• Bachelor’s degree in a related field (or equivalent experience).
• 3–5 years of relevant work experience (or 2–3 years with a graduate degree).
• Hands‑on experience with Microsoft Entra, Okta, Ping, Saviynt, and similar IAM solutions.
• Relevant certifications (CISSP, CISM, CISA, CIPT, CIPM, CRISC) preferred.
• Valid driver’s license and passport; willingness to travel as needed.

Responsibilities

• Conduct current state and access assessments for IAM.
• Develop IAM strategy and roadmaps including governance and policies.
• Architect and implement identity and authentication solutions.
• Design cloud security architectures for Azure, AWS, GCP, and hybrid environments.
• Implement access standards (SAML 2.0, OpenID Connect, OAuth, SCIM).
• Assist with IAM program management and compliance activities.

Skills

IAM technologies

User provisioning

RBAC

Directory services

SAML/OpenID/OAuth

Process mapping

Presentation/communication

Cybersecurity

Education

Bachelor’s degree in related field

Security certifications (CISSP/CISM/CISA/CIPT/CIPM/CRISC)

Tools

Microsoft Entra

Okta

Ping

Saviynt

Job description

EY is seeking a Digital Identity & Authentication SME to help clients design and implement robust identity solutions using Microsoft Entra, Okta, Ping, and Saviynt. You will shape IAM strategy, assess current states, and drive governance and risk reduction in hybrid cloud environments.

You will work with security, advisory teams and clients to deliver secure authentication workflows, access controls, and compliant IAM programs across Azure, AWS, and GCP.