Identity and Access Management Consultant

Role overview An IAM consultant role embedded with higher education institutions, helping colleges and universities strengthen access, authentication, and identity management across their technology environments. The position spans discovery, design, implementation, and ongoing support, blending deep technical work with strong client engagement. The role is remote, with occasional travel for onsite client engagements.

Responsibilities - Understand each client's business processes, security policies, and compliance requirements in order to design IAM solutions that meet their objectives. - Develop and implement IAM architecture covering access control, authentication, and identity management, with attention to scalability and security. - Stay current on emerging IAM tools and solutions, evaluate their fit for client requirements, and make tailored recommendations. - Conduct IAM assessments of existing client infrastructure, identify risks and vulnerabilities, and recommend remediation strategies. - Co-develop IAM policies and procedures that align with regulatory requirements and client business goals. - Provide technical guidance across the full IAM solution lifecycle, including requirements gathering, design, implementation, and post-implementation support.

Requirements - 5+ years of experience in Identity and Access Management consulting. - Bachelor's degree in Computer Science, Computer Engineering, or a related field, or equivalent industry experience. - Hands-on experience developing IAM architectures, including access control, authentication, and identity management. - Working knowledge of Active Directory, LDAP, SSO, and multi-factor authentication technologies, including their trade-offs. - SAML and CAS expertise, including IdP configuration, claim setup, certificate management, and troubleshooting. - Experience with identity provider solutions such as Shibboleth, WSO2 Identity Server, Apereo CAS, Entra ID, ADFS, and Okta, plus LDAP protocol and directory server administration.

Nice to have - Experience with Ellucian Products and Single Sign-On configuration, including Ellucian User Provisioning. - Familiarity with InCommon Trusted Access Platform, Shibboleth, Grouper, Midpoint, Comanage, and Microsoft Identity Manager. - Java and Java Server Pages technical skills. - Experience designing and deploying a variety of multi-factor authentication products. - Knowledge of the SPML framework and RESTful APIs. - CIAM, CISSP, or CISM certifications.

Benefits and work setup - Starting salary range of $110,000 to $130,000, depending on skills and experience, with final compensation determined through mutual agreement. - Remote work with flexible hours and possible travel for onsite client engagements. - Annual bonus, medical, vision, and dental coverage, flexible spending or health savings account, and life insurance. - 401(k) with a 5% employer contribution, plus PTO, sick and holiday pay. - Professional development opportunities and a monthly connectivity stipend.