Cyber Managed Services - SDC - Identity and Access Management - Senior
EY · Dallas
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
In an ever-evolving IT landscape, EY stands as a beacon of trust for clients across diverse industries seeking reliable solutions to address their intricate risks and vulnerabilities. As a vital member of our Identity and Access Management (IAM) team, you will play a central role in achieving this objective by empowering clients to comprehend and navigate their complex Enterprise Identity environments. Your expertise will be instrumental in evaluating, enhancing, and devising innovative solutions, processes, and policies to cater to each client's unique IAM requirements. This is an opportunity to leverage both your technical prowess and business acumen to drive our mission and make a significant impact on global cybersecurity.
The opportunity
We currently offer an exciting career opportunity for a Senior Consultant responsible for designing, engineering, maintaining, and troubleshooting a diverse range of Enterprise Employee Solutions across the IAM spectrum. Collaborating with esteemed and innovative professionals in the cybersecurity industry, you will have the opportunity to learn and apply cutting-edge tools and techniques to address some of the most relevant and pressing security challenges in the world.
At our core, our IAM services play a pivotal role in assisting our clients to align security management strategy with business goals. This involves managing access to resources and services, as well as enforcing business, privacy, and security policies. With the support of strategic alliances with third-party vendors, our experienced professionals offer a comprehensive suite of services, including strategy, assessment, testing, and implementation of IAM solutions.
Your Key Responsibilities
- Developing Saviynt /SailPoint IIQ policies and configuring rules to detect policy violations.
- Configuring Saviynt/SailPoint connectors, custom connectors, custom rules, workflow configurations, and third-party integrations.
- Implementing, managing, and maintaining enterprise Identity & Access Management tools.
- Designing and architecting solutions, alongside process design and re-engineering.
- Transforming or translating business requirements into technical specifications and executing technical delivery.
- Leveraging functionality provided by enterprise directory services like Active Directory, Azure AD, and LDAP, as well as MFA and SSO.
Skills and Attributes for Success
IAM & IGA Expertise
- Strong understanding of Identity Governance and Administration (IGA) concepts and best practices.
- Experience implementing SailPoint IIQ, SailPoint ISC, Saviynt EIC, or similar IGA platforms.
- Deep understanding of joiner, mover, leaver, certification, and access request processes.
- Experience with access reviews, entitlement governance, and provisioning workflows.
- Role & Entitlement Governance
- Experience designing RBAC and role lifecycle governance processes.
- Understanding of role mining, role engineering, entitlement modeling, and business role frameworks.
- Ability to define entitlement ownership, classification, and risk frameworks.
Risk & Compliance
- Knowledge of identity risk scoring methodologies.
- Experience working with Segregation of Duties (SoD), policy management, and compliance requirements.
- Familiarity with regulatory and audit-driven IAM controls.
Technical Skills
- Experience configuring IAM connectors, workflows, forms, certifications, and access request processes.
- Knowledge of:
- Active Directory
- Entra ID (Azure AD)
- LDAP
- SSO
- MFA
- SCIM
- REST APIs
- Web Services integrations
- Experience working with relational databases and SQL.
- Ability to support integrations across applications, directories, and governance platforms.
To qualify for the role you must have
- Hands-on experience with one or more of:
- SailPoint IdentityIQ
- SailPoint Identity Security Cloud (ISC)
- Saviynt Enterprise Identity Cloud (EIC)
- Saviynt
- Entra ID Governance
- Other leading IGA platforms
- Experience working directly with business stakeholders and application teams.
- Strong documentation, requirements gathering, and communication skills.
- Ability to travel as required for client engagements.
Ideally, you’d also have
- Professional certifications in Identity & Access Management, such as CISSP, CISM, or specific vendor certifications like Saviynt or SailPoint Certified Implementation Engineer.
- Knowledge of financial services IAM governance and regulatory controls. Experience with:
- Identity Risk Management
- Authorization Governance
- Access Certification
- Role Mining & Analytics
- Entitlement Rationalization
- Familiarity with additional IAM technologies and tools, beyond SailPoint, such as ForgeRock, Ping Identity, RSA, etc.
- Knowledge of cloud-based IAM solutions and experience working with cloud platforms like AWS, Azure, or Google Cloud.
- Exposure to privileged access management (PAM) solutions and practices, including CyberArk or similar tools.
- Understanding of regulatory compliance frameworks and industry standards related to IAM, such as GDPR, HIPAA, NIST, or ISO 27001.
- Prior experience in providing IAM services to clients from various industries, demonstrating versatility and adaptability in addressing diverse IAM challenges.
- Strong interpersonal and communication skills, with the ability to collaborate effectively with clients and cross-functional teams to present solution designs, options, and innovations.
What we look for
We’re interested in intellectually curious people with a genuine passion for cyber security. With your broad exposure across IAM, we’ll turn to you to speak up with innovative new ideas that could make a lasting difference not only to us – but also to the industry at large. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.
undefined