Identity and Access Management Architect / Engineer (Consultant/Senior Consultant), Cyber Risk

In this role you will help clients design, implement and operate IAM solutions that protect critical data and enable secure, scalable access. You will work with cross-functional teams to translate business needs into secure architectures aligned with standards like NIST. You’ll lead high/low level designs, integrate with enterprise systems and cloud platforms, and mentor client IAM teams through knowledge transfer. This is a hands-on, consulting-focused position at Deloitte’s Cyber Security practice, offering the chance to shape identity architecture across industries and drive measurable security impact.

• Define IAM use cases, requirements and technical specs for authentication, access control and integration
• Create high-level and detailed IAM designs and system architectures with component descriptions
• Specify dependencies, resources and performance requirements for IAM solutions
• Integrate IAM with third-party systems and tools (SIEM, MFA, cloud platforms) and define RACI for operations
• Document IAM implementations and operation processes (onboarding, provisioning, access requests, governance)
• Install and configure IAM components on-premises or in cloud, and script extensions for cloud IAM
• Collaborate with IT infrastructure to meet prerequisites and dependencies
• Integrate IAM with directories, cloud apps and HR systems
• Perform unit/integration/functional/non-functional testing and troubleshoot with vendors
• Deliver post-implementation hyper-care support and advanced production troubleshooting
• Conduct knowledge transfer sessions and training for client IAM teams

• Broad enterprise identity experience across authentication, access control and CIAM solutions
• Experience with IGA, PAM, AM, AD and CIAM tools (SailPoint, Saviynt)
• Cloud hosting experience (AWS, Azure, GCP) and on-premise AD/AD DS components
• Knowledge of decentralised identity, verifiable credentials, microservices and Trust over IP
• Certifications (CIAM, CISSP, CAMS) are desirable
• DevOps tools and repositories (Git, Azure DevOps, Kubernetes, Docker, Jenkins, Ansible)
• RBAC design and practical Linux experience
• Modern Authentication concepts (SCIM, SAML, WS-Federation, OAuth, OpenID Connect)
• Experience with waterfall and agile methodologies
• Ability to manage junior team members in a multi-location, multicultural environment

• Excellent verbal and written communication
• Detail-oriented problem-solving
• Cross-functional collaboration
• SailPoint, Saviynt (IGA/CIAM)
• AWS, Azure, GCP
• Microsoft Active Directory / Azure AD Domain Services