Senior IAM Architect: Enterprise Identity & Access

Ernst & Young Oman; Richmond (VA); Hybrid; USD 115,000 - 266,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a Senior Consultant to design, engineer, and maintain a broad range of Enterprise IAM solutions. You will implement and optimize access governance, RBAC, and identity lifecycle processes across multiple platforms, collaborating with client teams and vendors.

You will work with tools like SailPoint IIQ/ISC and Saviynt, configuring connectors, policies, and workflows while leveraging AD/Entra ID, LDAP, MFA, and SSO to secure enterprise resources.

Qualifications

• Hands‑on experience with one or more IAM/IGA platforms such as SailPoint IIQ/ISC, Saviynt EIC or Saviynt.
• Strong understanding of IGA concepts, access governance, and SoD controls.
• Experience with RBAC and entitlement governance across large enterprises.
• Experience configuring connectors, workflows, and access request processes.

Responsibilities

• Developing Saviynt/SailPoint IIQ policies and configuring rules to detect policy violations.
• Configuring Saviynt/SailPoint connectors, custom connectors, custom rules, workflow configurations, and third‑party integrations.
• Implementing, managing, and maintaining enterprise IAM tools.
• Designing and architecting solutions, alongside process design and re‑engineering.
• Transforming business requirements into technical specifications and executing technical delivery.
• Leveraging Active Directory, Entra ID, LDAP, MFA, and SSO in IAM solutions.

Skills

IGA

IAM

RBAC

SailPoint IIQ

SailPoint ISC

Saviynt

Entra ID (Azure AD)

LDAP

SSO

MFA

REST APIs

SQL

Cloud IAM

Tools

Saviynt EIC

SailPoint IIQ

SailPoint ISC

Entra ID Governance

Job description

EY is seeking a Senior Consultant to design, engineer, and maintain a broad range of Enterprise IAM solutions. You will implement and optimize access governance, RBAC, and identity lifecycle processes across multiple platforms, collaborating with client teams and vendors.

You will work with tools like SailPoint IIQ/ISC and Saviynt, configuring connectors, policies, and workflows while leveraging AD/Entra ID, LDAP, MFA, and SSO to secure enterprise resources.