Senior IAM Consultant: Enterprise Identity & Access

EY; Phoenix (AZ); Hybrid; USD 120,000 - 260,000; Full time

Job summary

EY is seeking a Senior Consultant for design, engineering, and maintenance of Enterprise IAM solutions across diverse industries. You will implement and optimize IAM tooling, collaborate with clients, and translate business needs into technical security controls.

Ideal candidates bring hands-on experience with SailPoint IIQ/ISC, Saviynt, and other IGA platforms, plus strong RBAC, access governance, and SoD knowledge. Travel to client sites may be required.

Qualifications

• Hands-on experience with SailPoint IdentityIQ, SailPoint ISC, Saviynt EIC or similar IGA platforms.
• Knowledge of joiner, mover, leaver, certification and access request processes.
• Experience with access reviews, entitlement governance and provisioning workflows.
• Experience designing RBAC and role lifecycle governance processes.
• Knowledge of identity risk scoring methodologies and SoD.
• Familiarity with regulatory and audit-driven IAM controls.
• Experience configuring IAM connectors, workflows, forms, certifications, and access requests.
• Ability to travel as required for client engagements.

Responsibilities

• Design, engineer, maintain and troubleshoot Enterprise IAM solutions.
• Develop policies and connectors for IAM platforms.
• Collaborate with clients to align security management with business goals.
• Translate business requirements into technical specifications and deliver solutions.
• Leverage directories like AD, Entra ID, LDAP and MFA/SSO to enable secure access.

Skills

IGA concepts

SailPoint IIQ

RBAC design

Access reviews

Entitlement governance

Role governance

Role mining

Entitlement ownership

Tools

Active Directory

Entra ID

LDAP

SSO

MFA

SCIM

REST APIs

SQL

Job description

EY is seeking a Senior Consultant for design, engineering, and maintenance of Enterprise IAM solutions across diverse industries. You will implement and optimize IAM tooling, collaborate with clients, and translate business needs into technical security controls.

Ideal candidates bring hands-on experience with SailPoint IIQ/ISC, Saviynt, and other IGA platforms, plus strong RBAC, access governance, and SoD knowledge. Travel to client sites may be required.