Required Skills & Experience
5–6+ years of consulting experience Strong hands-on security assessment experience with Microsoft Entra ID and Active Directory Deep IAM knowledge across privileged access, authentication, conditional access, federation, service identities, and entitlement risk Experience assessing complex multi-forest and multi-tenant identity environments Attack-path analysis experience using BloodHound or equivalent techniques/tooling Experience identifying material identity exposure and translating findings into risk-based remediation recommendations Strong IAM architecture and enterprise risk experience
Nice to Have Skills & Experience
SailPoint experience CyberArk / PAM experience Okta experience Healthcare environment experience Post-acquisition identity integration experience CIEM / permissions management experience Broader Microsoft identity security tooling experience
Job Description
We are looking for an experienced IAM Architect to assess identity and access risk across a complex enterprise environment. This person will evaluate Entra ID, Active Directory, privileged access, authentication, federation, entitlements, and identity integrations to identify material attack paths and areas of business exposure. They need to understand the broader IAM ecosystem beyond Microsoft, including platforms such as SailPoint, CyberArk, and Okta, and be able to evaluate how identity connects with HR, infrastructure, cloud, applications, and other business processes. This is an architecture and risk-focused role, not an AD/Entra ID configuration position.
Day-to-Day Assess Entra ID, Active Directory, and the broader IAM environment. Evaluate privileged access, authentication, federation, conditional access, service identities, and entitlements. Identify identity attack paths, excessive privileges, trust relationships, and business exposure. Assess complex multi-forest and multi-tenant identity environments. Evaluate IAM platforms such as SailPoint, CyberArk, and Okta alongside the Microsoft ecosystem. Perform or assess attack-path analysis using BloodHound or equivalent techniques/tooling. Work with HR and other business teams to understand identity governance, provisioning, and access processes. Evaluate risks created by legacy environments and post-acquisition identity integrations. Determine which IAM findings represent material business risk versus lower-priority configuration issues. Recommend practical remediation and validate corrective actions. Translate technical IAM findings into a clear picture of identity-related business risk and exposure. Coordinate findings with cloud, infrastructure, application, and enterprise-risk teams.