Senior IAM Architect — Enterprise Access & Governance

EY; Denver (CO); Hybrid; USD 115,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Job summary

EY is seeking a Senior Consultant to design, engineer, and support a broad spectrum of Enterprise IAM solutions for clients. You will implement, optimize, and troubleshoot IAM platforms, aligning security with business goals while collaborating with cross-functional teams in a dynamic environment.

The role emphasizes hands-on policy creation, connector configurations, and integration with directory services, MFA, and SSO, with opportunities to travel for client engagements and contribute to

Qualifications

• Hands-on experience with one or more IAM platforms (SailPoint IIQ, SailPoint ISC, Saviynt EIC, Saviynt, Entra ID Governance)
• Experience collaborating with business stakeholders and application teams
• Strong documentation, requirements gathering, and communication skills
• Ability to travel as required for client engagements

Responsibilities

• Developing IAM policies and configuring rules to detect policy violations.
• Configuring connectors, custom connectors, rules, and workflow configurations.
• Implementing, managing, and maintaining IAM tools.
• Designing and architecting IAM solutions and related processes.
• Translating business requirements into technical specifications and delivery.
• Leveraging AD, Entra ID, LDAP, MFA and SSO in solutions.

Skills

IAM concepts

SailPoint IIQ

Saviynt EIC

Azure AD / Entra ID

RBAC governance

SoD

REST APIs

LDAP / AD

Tools

SailPoint ISC

Saviynt

Entra ID Governance

Active Directory

Job description

EY is seeking a Senior Consultant to design, engineer, and support a broad spectrum of Enterprise IAM solutions for clients. You will implement, optimize, and troubleshoot IAM platforms, aligning security with business goals while collaborating with cross-functional teams in a dynamic environment.

The role emphasizes hands-on policy creation, connector configurations, and integration with directory services, MFA, and SSO, with opportunities to travel for client engagements and contribute to