Enterprise Cloud IAM Consultant

Role

Enterprise Cloud IAM Consultant(24062-1)

Location – Austin, TX/Remote

Onsite Requirement – Yes

Number of days onsite – 5 Days/NA

Must Have Skills

Skill 1 – Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.

Skill 2 – Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).

Skill 3 – Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.

Good To have Skills –

Skill 1 – Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption

Domain Experience (If any) – Microsoft Azure + Entra and AWS Cloud IAM

Job Responsibilities

• Design, implement, and manage enterprise Identity & Access Management (IAM) solutions across Microsoft Entra ID, Azure, and AWS, ensuring secure, scalable, and resilient identity services.
• Serve as the Subject Matter Expert (SME) for Microsoft Entra ID and Cloud Identity Services, managing identity lifecycle, authentication, authorization, federation, and cloud-native identity integrations.
• Implement modern identity security controls including Multi-Factor Authentication (MFA), Conditional Access, Identity Protection, Privileged Identity Management (PIM), Access Reviews, Entitlement Management, and Single Sign-On (SSO).
• Design and support secure authentication and federation architectures using SAML, OAuth 2.0, OpenID Connect (OIDC), and FIDO2 standards to enable secure access across cloud and SaaS platforms.
• Manage cloud identity and access controls across AWS and Azure, including IAM roles, policies, federated access, workload identities, managed identities, service principals, cross-account access, and least-privilege enforcement.
• Lead governance of enterprise applications and privileged access, including Azure Enterprise Applications, App Registrations, Service Principals, AWS IAM Roles, Secrets Management, and privileged account controls.
• Drive IAM governance, compliance, and risk management through access certifications, role-based access control (RBAC), segregation of duties (SoD), audit readiness, and regulatory compliance initiatives.
• Manage identity security technologies and supporting infrastructure, including Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, certificate lifecycle management, and machine/workload identities.
• Implement and support cloud-native identity architectures, including Microsoft Entra Workload Identities, Azure Managed Identities, AWS IAM Roles, and federated access patterns to eliminate reliance on long-lived credentials.
• Partner with Cloud, Security, Infrastructure, and Compliance teams to advance Zero Trust adoption, strengthen identity security posture, remediate IAM-related findings, and support secure cloud transformation initiatives.

________________________________________

Preferred Certifications

One or more of the following certifications are preferred:

Microsoft Certified

Identity and Access Administrator Associate (SC-300)

Microsoft Certified

Azure Security Engineer Associate (AZ-500)

Microsoft Certified

Cybersecurity Architect Expert (SC-100)

• AWS Certified Security – Specialty
• AWS Certified Advanced Networking – Specialty (preferred)
• Certified Identity and Access Manager (CIAM) or equivalent IAM certification