Identity and Access Management Consultant (Contract)
- Toronto, ON, Canada
- Etobicoke, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
CoreFactor is searching for an Identity and Access Management Consultant on a contract basis for a client in the GTA.
This position is hybrid and will require the successful consultant to go into the office two (2) times per week.
The Identity and Access Management Consultant will lead our clients IAM strategy, governance, transformation, and operations. The role is accountable for strengthening identity governance, privileged access, authentication, directory services, and access controls across the organization.
Working with Cybersecurity, IT, Human Resources, application owners, Audit, business stakeholders, and service providers, the consultant will deliver sustainable IAM capabilities and provide leadership on identity-related risk, architecture, technology, and operations.
Key Accountabilities
This position is hybrid and will require the successful consultant to go into the office two (2) times per week.
The Identity and Access Management Consultant will lead our clients IAM strategy, governance, transformation, and operations. The role is accountable for strengthening identity governance, privileged access, authentication, directory services, and access controls across the organization.
Working with Cybersecurity, IT, Human Resources, application owners, Audit, business stakeholders, and service providers, the consultant will deliver sustainable IAM capabilities and provide leadership on identity-related risk, architecture, technology, and operations.
Key Accountabilities
- Own the IAM strategy, roadmap, standards, operating model, and governance framework.
- Lead IAM transformation initiatives and transition new capabilities into operations.
- Oversee directory services, hybrid identity, authentication, and identity synchronization.
- Lead the selection and implementation of identity-governance and privileged-access solutions.
- Establish Joiner-Mover-Leaver, access-request, RBAC, and Access Review capabilities.
- Oversee privileged-account governance across servers, applications, cloud services, service accounts, and network devices.
- Establish standards for credential vaulting, password rotation, session monitoring, emergency access, and exceptions.
- Manage IAM vendors, budgets, contracts, projects, service performance, and delivery commitments.
- Develop policies, procedures, runbooks, service levels, and performance reporting.
- Support audits, risk assessments, incidents, and remediation of IAM control deficiencies.
- Lead internal resources, contractors, and external service providers.
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline. Equivalent education and experience will be considered.
- Seven or more years of experience in IAM, cybersecurity, or infrastructure security.
- At least three years leading IAM programs, services, projects, teams, or vendors.
- Experience implementing or operating enterprise IAM capabilities in Microsoft-oriented environments.
- Experience transitioning IAM solutions from implementation into ongoing operations.
- Strong knowledge of identity governance, lifecycle management, least privilege, RBAC, and access certification.
- Knowledge of Active Directory, Microsoft Entra ID, hybrid identity, authentication, and privileged administration.
- Experience with leading IGA and PAM platforms. Familiarity with products such as SailPoint, Saviynt, CyberArk, or comparable solutions is an asset.
- Understanding of privileged access across Windows, Linux, applications, service accounts, cloud platforms, and network devices.
- Familiarity with LDAP, Kerberos, SAML, OAuth, OpenID Connect, RADIUS, TACACS+, and APIs.
- Strong leadership, vendor-management, stakeholder-engagement, analytical, and communication skills.
- Experience in a regulated, utility, telecommunications, or critical-infrastructure environment.
- Experience with IAM transformation, shared-service integrations, and identity-data remediation.
- Familiarity with NIST, ISO 27001, or CIS security frameworks.
- Certifications such as CISSP, CISM, CISA, Microsoft identity certifications, or relevant IAM/PAM platform certifications.
More about this job
Responsibilities
Lead the organization’s IAM strategy, governance, roadmap, and transformation, including identity governance, privileged access, authentication, directory services, and access controls. Manage IAM solutions, vendors, operations, policies, audits, and remediation while coordinating internal teams and external service providers.
Requirements
Requires a bachelor’s degree in a relevant discipline or equivalent education and experience, at least seven years of IAM, cybersecurity, or infrastructure security experience, and three or more years leading IAM programs, services, projects, teams, or vendors. Candidates should have enterprise IAM experience in Microsoft-oriented environments, knowledge of IGA and PAM platforms and identity protocols, and strong leadership, vendor-management, stakeholder, analytical, and communication skills.
Skills
- Identity And Access Management
- Identity Governance
- Privileged Access Management
- Active Directory
- Microsoft Entra ID
- Hybrid Identity
- Authentication
- Role-Based Access Control
- Access Certification
- Identity Lifecycle Management
- Directory Services
- Vendor Management
- Stakeholder Engagement
- Risk Management
- SailPoint
- CyberArk
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Management & Leadership
- Consulting
- Energy
Keywords
- Identity And Access Management
- Identity Governance
- Privileged Access Management
- Active Directory
- Microsoft Entra ID
- Hybrid Identity
- Identity Synchronization
- Authentication
- Directory Services
- Identity Lifecycle Management
- Joiner-Mover-Leaver
- Role-Based Access Control
- Access Reviews
- Least Privilege
- Access Certification
- SailPoint
- Saviynt
- CyberArk
- LDAP
- Kerberos
- SAML
- OAuth
- OpenID Connect
- RADIUS
- TACACS+
- APIs
- NIST
- ISO 27001
- CIS
- CISSP