Principal Technical Consultant, Security

OpenKrill; United States; Remote; USD 32,000 - 63,000; Full time

Benefits offered by this job

Health insurance

Paid time off

Learning and development

Flexible work arrangements

Well-being programs

Retirement benefits

Job summary

AHEAD seeks a Principal Technical Consultant focused on Identity Security to lead hands-on delivery across Microsoft identity (AD and Entra ID), IGA, and modern authentication. You will own identity workstreams, shape architecture, planning, and execution with client stakeholders.

You will design hybrid identity solutions, drive SSO, MFA, and passwordless patterns, and guide RBAC/ABAC/PBAC models. Strong client-facing leadership is essential to deliver practical, secure outcomes.

Qualifications

• Strong Microsoft identity architecture experience including AD and Entra ID.
• Hands-on IGA knowledge and client delivery experience.
• Deep understanding of RBAC, ABAC, PBAC in enterprise settings.
• Expertise in SSO, MFA, passwordless patterns and modern auth.
• Experience leading implementation with clear ownership and delivery.

Responsibilities

• Lead identity workstreams from discovery to target state architecture and delivery.
• Design Microsoft identity solutions with hybrid identity patterns.
• Drive modern authentication and federation capabilities (SSO, MFA, passwordless).
• Lead IGA deliverables: JML, provisioning, deprovisioning, access requests.
• Define access control models and translate business needs into design.
• Own client-facing delivery: requirements, design reviews, runbooks, and documentation.

Skills

Microsoft Identity

Active Directory

Entra ID

IGA delivery

RBAC/ABAC/PBAC

SSO/MFA/Passwordless

Client-facing consulting

Leadership

PAM

Tools

Okta

Delinea

CyberArk

PowerShell

Python

Job description

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.

The Principal Technical Consultant (PTC) Identity Focused Security Architect is a hands‑on delivery leader who designs and leads identity solution implementations in client environments. You will own identity workstreams end to end, driving architecture, implementation planning, execution oversight, and stakeholder alignment, primarily across Microsoft identity (Active Directory and Entra ID), IGA, and modern authentication patterns (SSO, MFA, password less). Experience with other IAM platforms (e.g., Okta) and PAM (e.g., Delinea, CyberArk) experience is a plus.

Core ResponsibilitiesIdentity architecture and implementation leadership:

• Lead identity workstreams from discovery and current state analysis through target state architecture, implementation planning, delivery oversight, and closeout.
• Design and deliver Microsoft identity solutions with a deep focus on Active Directory and Microsoft Entra ID, including hybrid identity patterns where applicable.
• Drive the technical approach for modern authentication and federation capabilities, including SSO, MFA, and password less.

Identity Governance and Administration (IGA) delivery:

• Lead and or execute IGA-focused deliverables such as:
• Joiner mover-leaver lifecycle processes
• Provisioning and deprovisioning patterns
• Access request workflows where applicable
• Role and policy model improvement to reduce risk and increase operational clarity

Access control model design:

• Apply and communicate access control methodologies, including RBAC, ABAC, and PBAC, translating business requirements into implementable identity and authorization designs.

Client-facing consulting and execution:

• Own day-to-day technical leadership with clients: requirements sessions, whiteboarding, design reviews, implementation coordination, and executive-ready communication.
• Coordinate delivery across client stakeholders (engineering teams through senior security leaders) to align on priorities, sequencing, and execution plans.
• Produce clear, high-quality deliverables (architecture diagrams, implementation plans, runbooks, and decision documentation).

Required Qualifications

• Strong Microsoft identity architecture and implementation experience, especially Active Directory and Entra ID.
• Hands‑on IGA knowledge and delivery experience in real client environments.
• Strong understanding of access control methodologies: RBAC, ABAC, PBAC.
• Strong authentication expertise: SSO, MFA, password less, with design and implementation level understanding.
• Demonstrated ability to lead implementation, not just advise; planning, execution oversight, and delivery ownership.
• Proven client-facing consulting capability: stakeholder management, clear communication, and whiteboard‑ready technical leadership.

Plus scope responsibilities (nice to haves)

• Support implementations or integrations with other IAM platforms (Okta or comparable solutions).
• Contribute to or support PAM initiatives (Privileged Access Management), such as privileged access workflows, vaulting patterns, and privileged lifecycle controls, when in scope.

Preferred Qualifications

• Experience implementing or supporting EntraID, Okta, or similar IAM platforms.
• PAM experience (Privileged Access Management).
• Scripting or automation exposure (PowerShell, Python) to support identity integrations and operationalization.
• Experience working in large, complex environments developing global strategies for successful implementation delivery.

What success looks like

• Clients receive identity architectures that are implementable, not theoretical, backed by an execution plan, and delivered outcomes.
• Identity workstreams are delivered smoothly with strong coordination, clear documentation, and stakeholder alignment.
• Authentication and governance controls measurably improve security posture while supporting business usability.

Why AHEAD:

Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between.

We fuel growth by stacking our office with top‑notch technologies in a multi‑million‑dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning.

India Employment Benefits include:

• Comprehensive health insurance coverage for employees, with options to extend coverage to dependents
• Paid time off and company holidays, along with additional leave benefits as per policy
• Flexible work arrangements, supporting work‑life balance
• Learning and development opportunities to support continuous growth and upskilling
• Employee wellness initiatives and programs focused on physical and mental well‑being
• Retirement and statutory benefits in line with India regulations
• Inclusive and people‑first culture, with a strong focus on collaboration and ownership