Identity and Access Management Consultant

The role

You will partner with higher education institutions to strengthen access, authentication, and identity management. You will assess existing IAM infrastructure and guide solutions from discovery and design through implementation and support.

What you will do

• Understand client business processes, security policies, and compliance requirements to design IAM solutions.
• Develop and implement scalable and secure IAM architecture.
• Maintain technical currency for IAM tools and recommend solutions.
• Conduct IAM assessments to identify risks and vulnerabilities and recommend remediation.
• Work with clients to develop IAM policies and procedures.
• Provide technical guidance and support throughout the IAM solution lifecycle.

Required qualifications

• 5+ years of experience in Identity and Access Management consulting.
• Bachelor's degree in Computer Science, Computer Engineering, or a related field (related industry experience will be considered in place of a degree).
• Experience developing and implementing IAM architectures, including access control, authentication, and identity management.
• Knowledge of IAM technologies and solutions, including Active Directory, LDAP, SSO, and multi-factor authentication.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team, managing multiple clients and projects at one time.
• SAML and CAS expertise to configure services, manage and troubleshoot IdP, and manage certificates.
• Knowledge and experience working with IdP solutions such as Ellucian Ethos Identity, WSO2 Identity Server, Shibboleth Identity Provider, Apereo CAS, QuickLaunch, PortalGuard, Entra ID, ADFS, and Okta.
• Experience with the LDAP protocol and working with a directory server to configure, deploy, and manage the environment.

Nice to have

• Previous experience working in or with higher education institutions
• Experience with Ellucian Products & Single-Sign-On Configuration
• Experience with Ellucian User Provisioning (EUP)
• Significant experience working with IAM tools including InCommon Trusted Access Platform, Shibboleth, Grouper, Midpoint, Comanage, Microsoft Identity Manager, and Entra ID
• Technical skills working with Java and Java Server Pages
• Knowledge and experience working a variety of multi-factor authentication (MFA) products
• Knowledge of the SPML framework
• Experience working with RESTFUL APIs
• CIAM, CISSP or CISM certifications

Benefits

• Flexible hours
• Annual bonus
• Medical, vision and dental
• Flexible spending/Health savings account
• PTO, Sick and holiday pay
• Life insurance
• Retirement 401(k) 5% employer contributions
• Professional Development opportunities
• Monthly Connectivity stipend

About the company

Strata Information Group (SIG) is a higher-education technology consulting leader supporting colleges and universities with ERP/SIS modernization, digital transformation, CRM, cybersecurity, and strategic advisory services.