Job Description

Designation DWP Consultant

• The role of IT Infrastructure –End User Computing (DWP) consultant is a specialist role and involve the following roles and responsibilities:
• Senior IAM expert with deep hands-on experience across AD, AD DS, Azure AD/Entra ID, SailPoint, Okta, and modern identity security platforms.
• Lead architecture, design, migration, and modernization of large-scale IAM and IGA environments across on prem, cloud, and hybrid models.
• Define strategic roadmaps including SSO/MFA, lifecycle management, directory modernization, Zero Trust, and identity governance.
• Assess current-state IAM landscapes and deliver consulting-led recommendations for secure, scalable future-state architectures.
• Provide solutioning expertise for complex IAM scenarios involving federation, conditional access, identity protection, and app integrations.
• Drive SailPoint implementations covering certifications, workflows, provisioning, connectors, and identity governance automation.
• Lead Okta and Entra ID integrations for SSO, adaptive MFA, lifecycle automation, and secure federation models.
• Implement and automate identity processes, provisioning, and operational workflows using PowerShell, APIs, and DevOps pipelines.
• Integrate IAM capabilities with M365, Intune, and endpoint security models to enable unified access, compliance, and device trust.
• Engage with senior stakeholders with a strong consulting mindset, providing leadership, solution designs, and presales support including RFP/RFI responses.
• Actively participate in business development activities, identifying new opportunities and expanding service offerings within the EUC domain.
• Integrate IAM capabilities with M365 and Intune using device trust policies, compliance signals, and secure access configurations to support modern endpoint security.
• Drive advanced reporting and analytics using Power BI to build dashboards for identity governance, access risks, compliance posture, and user behavior insights.
• Leverage AI/ML-driven capabilities (e.g., anomaly detection, access pattern analysis, predictive risk scoring) to enhance identity security and improve end user experience within EUC ecosystems.
• Collaborate with security, cloud, and EUC teams to architect Zero Trust–aligned access policies, enhance directory hygiene, and ensure compliance across both identity and device landscapes.

Desired Profile

• A bachelor's degree in computer science, information systems, or a related technical field.
• 5+ years of experience in End User Computing (EUC) and Identity & Access Management (IAM) with strong expertise in AD, Azure AD/Entra ID, Domain Migrations, and cloud-based workspace solutions.
• Proven capability in designing, architecting, and implementing large-scale EUC and IAM solutions, including directory modernization and identity lifecycle management.
• Strong background in domain migration, identity federation, conditional access, and secure authentication models across hybrid environments.
• Advanced PowerShell scripting skills with a focus on automation, identity lifecycle workflows, and operational efficiency across IAM/EUC platforms.
• Experience with M365 ecosystem and Intune device management, including compliance, app delivery, and device trust integration with identity policies.
• Ability to build dashboards and analytics using Power BI to support identity insights, EUC performance, access governance, and operational reporting.
• Understanding of AI/ML-driven capabilities for EUC and IAM, including anomaly detection, behavioral analysis, and intelligent access recommendations.
• Excellent communication skills with a consulting mindset, capable of collaborating with cross-functional teams and engaging senior stakeholders for solutioning and architecture discussions.

Experience - 4 to 7 years

Education - B.Tech. / BS in Computer Science

Technical Skills & Certifications

• Microsoft Entra ID / Azure AD
• Active Directory (AD / AD DS)
• Identity Governance & Administration (IGA)
• SailPoint (IIQ / IDN)
• Okta Identity Cloud
• Single Sign-On (SSO) & MFA
• Conditional Access
• Zero Trust (Identity-focused)
• Microsoft 365 (M365)
• Microsoft Intune
• PowerShell Automation (IAM & Intune)
• Power BI (Identity & M365 reporting)