Senior Cyber IAM Architect - Managed Services

EY; Tampa (FL); Hybrid; USD 115,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking a Senior Consultant to design, engineer, maintain, and troubleshoot a diverse range of Enterprise Employee Solutions across the IAM spectrum. You will work with top cybersecurity professionals to apply cutting-edge tools and techniques to meet clients’ IAM needs.

The role emphasizes aligning security management with business goals, managing access to resources, and implementing IAM strategies using Active Directory, Entra ID, LDAP, MFA, SSO, and REST APIs.

Qualifications

• Hands-on experience with SailPoint IdentityIQ/ISC or Saviynt EIC or similar IGA platforms.
• Experience designing RBAC and entitlement governance processes.
• Knowledge of identity risk scoring and SoD controls; regulatory awareness.

Responsibilities

• Develop IAM policies, connectors, rules, and workflows.
• Implement and manage enterprise IAM tools (Active Directory, Entra ID, LDAP, MFA, SSO).
• Translate business requirements into technical specifications and deliver solutions.
• Collaborate with stakeholders and architects to design secure IAM architectures.
• Support integrations across applications and governance platforms.
• Travel as required for client engagements.

Skills

IGA concepts

SailPoint IIQ

SailPoint ISC

Saviynt EIC

Entra ID Governance

RBAC design

Access governance

SoD awareness

Tools

Saviynt connectors

SailPoint connectors

Active Directory

Azure AD

LDAP

REST APIs

Job description

EY is seeking a Senior Consultant to design, engineer, maintain, and troubleshoot a diverse range of Enterprise Employee Solutions across the IAM spectrum. You will work with top cybersecurity professionals to apply cutting-edge tools and techniques to meet clients’ IAM needs.

The role emphasizes aligning security management with business goals, managing access to resources, and implementing IAM strategies using Active Directory, Entra ID, LDAP, MFA, SSO, and REST APIs.