Job Description

Ensign is hiring !

Job Overview

As a Senior Cybersecurity Consultant (IAM), you will be part of a dynamic team responsible for assessing, designing, building, implementing, and managing Identity and Access Management (IAM) security solutions for our clients. You will support clients in strengthening their security posture and protecting their critical business assets.

Duties and Responsibilities

• Assess clients’ Identity and Access Management (IAM) requirements and provide recommendations on appropriate IAM solutions and security controls.
• Design, build, implement, integrate, and manage IAM solutions to support clients’ business and security objectives.
• Lead and support IAM implementation and transformation projects, including solution configuration, integration, testing, deployment, and operational support.
• Work with key stakeholders to gather requirements and translate business and security needs into technical IAM solutions.
• Implement and support IAM capabilities, including:
• User provisioning and deprovisioning
• Directory services
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• Identity Governance and Administration (IGA)
• Configure and support IAM solutions such as SailPoint, Okta, ForgeRock/Ping Identity, and CyberArk.
• Develop scripts and automation using programming languages such as Java, Python, or other relevant technologies to support IAM integration and operational requirements.
• Integrate IAM solutions with enterprise applications, infrastructure, and cloud environments, including Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure.
• Perform troubleshooting and root cause analysis for complex IAM-related issues and provide timely resolutions.
• Develop and maintain technical documentation, including solution designs, implementation plans, configuration guides, and operational procedures.
• Provide technical guidance and mentorship to junior consultants and engineers where required.
• Communicate and collaborate effectively with clients, internal stakeholders, and cross-functional teams throughout the project lifecycle.
• Stay updated on emerging IAM technologies, industry trends, and security best practices to continuously enhance service delivery and solution capabilities.

Requirements

• A recognised university degree in Computer Science, Computer/Electrical Engineering, Information Technology, or a related discipline.
• At least 5 years of relevant experience in Identity and Access Management (IAM), cybersecurity, or information security.
• Prior experience in a business or technology consulting role, preferably with a leading consulting or professional services firm, would be advantageous.
• Strong understanding of IAM concepts, principles, and technologies.
• Working knowledge of:
• User provisioning and deprovisioning
• Privileged Access Management (PAM)
• Directory services
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• Identity Governance and Administration (IGA)
• Hands-on experience with one or more IAM solutions, such as SailPoint, Okta, ForgeRock/Ping Identity, or CyberArk/BeyondTrust.
• Experience in implementing, configuring, integrating, and supporting IAM tools and processes in enterprise environments.
• Ability to develop scripts or code using at least one programming language, such as Java or Python.
• Strong analytical and problem-solving skills, with the ability to troubleshoot complex IAM-related issues.
• Excellent verbal and written communication, interpersonal, analytical, and stakeholder management skills.
• Ability to work independently and collaboratively in a team environment.
• A proactive and creative mindset with strong problem-solving and critical-thinking capabilities.
• Strong interest and demonstrated passion for the field of information security.

Preferred Qualifications

• Experience with IAM solutions and services across major cloud platforms, including Google Cloud Platform (GCP), Amazon Web Services (AWS), and/or Microsoft Azure.
• Relevant industry certifications such as CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, or ITIL.
• Relevant IAM or solution-level certifications, such as those offered by SailPoint, CyberArk, BeyondTrust, Okta, or ForgeRock/PingIdentity.
• Additional cybersecurity certifications such as OSCP, CREST, or GIAC would be advantageous.
• Experience in penetration testing or broader cybersecurity assessment activities would be a plus.