The Role
Leads consulting engagements focused on assessing, designing, implementing, integrating, and managing enterprise IAM solutions. Responsibilities include provisioning, directory services, MFA, SSO, IGA, PAM, cloud integrations, troubleshooting, automation, documentation, stakeholder collaboration, and mentoring junior professionals. The role requires hands-on experience with IAM platforms such as SailPoint, Okta, ForgeRock, Ping Identity, or CyberArk, plus scripting in Java or Python.
Summary Generated by Built In
Ensign is hiring !
Job Overview
As a Senior Cybersecurity Consultant (IAM), you will be part of a dynamic team responsible for assessing, designing, building, implementing, and managing Identity and Access Management (IAM) security solutions for our clients. You will support clients in strengthening their security posture and protecting their critical business assets.
Duties and Responsibilities
- Assess clients’ Identity and Access Management (IAM) requirements and provide recommendations on appropriate IAM solutions and security controls.
- Design, build, implement, integrate, and manage IAM solutions to support clients’ business and security objectives.
- Lead and support IAM implementation and transformation projects, including solution configuration, integration, testing, deployment, and operational support.
- Work with key stakeholders to gather requirements and translate business and security needs into technical IAM solutions.
- Implement and support IAM capabilities, including:
- User provisioning and deprovisioning
- Directory services
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Identity Governance and Administration (IGA)
- Configure and support IAM solutions such as SailPoint, Okta, ForgeRock/Ping Identity, and CyberArk.
- Develop scripts and automation using programming languages such as Java, Python, or other relevant technologies to support IAM integration and operational requirements.
- Integrate IAM solutions with enterprise applications, infrastructure, and cloud environments, including Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure.
- Perform troubleshooting and root cause analysis for complex IAM-related issues and provide timely resolutions.
- Develop and maintain technical documentation, including solution designs, implementation plans, configuration guides, and operational procedures.
- Provide technical guidance and mentorship to junior consultants and engineers where required.
- Communicate and collaborate effectively with clients, internal stakeholders, and cross-functional teams throughout the project lifecycle.
- Stay updated on emerging IAM technologies, industry trends, and security best practices to continuously enhance service delivery and solution capabilities.
Requirements
- A recognised university degree in Computer Science, Computer/Electrical Engineering, Information Technology, or a related discipline.
- At least 5 years of relevant experience in Identity and Access Management (IAM), cybersecurity, or information security.
- Prior experience in a business or technology consulting role, preferably with a leading consulting or professional services firm, would be advantageous.
- Strong understanding of IAM concepts, principles, and technologies.
- Working knowledge of:
- User provisioning and deprovisioning
- Privileged Access Management (PAM)
- Directory services
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Identity Governance and Administration (IGA)
- Hands-on experience with one or more IAM solutions, such as SailPoint, Okta, ForgeRock/Ping Identity, or CyberArk/BeyondTrust.
- Experience in implementing, configuring, integrating, and supporting IAM tools and processes in enterprise environments.
- Ability to develop scripts or code using at least one programming language, such as Java or Python.
- Strong analytical and problem-solving skills, with the ability to troubleshoot complex IAM-related issues.
- Excellent verbal and written communication, interpersonal, analytical, and stakeholder management skills.
- Ability to work independently and collaboratively in a team environment.
- A proactive and creative mindset with strong problem-solving and critical-thinking capabilities.
- Strong interest and demonstrated passion for the field of information security.
Preferred Qualifications
- Experience with IAM solutions and services across major cloud platforms, including Google Cloud Platform (GCP), Amazon Web Services (AWS), and/or Microsoft Azure.
- Relevant industry certifications such as CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, or ITIL.
- Relevant IAM or solution-level certifications, such as those offered by SailPoint, CyberArk, BeyondTrust, Okta, or ForgeRock/PingIdentity.
- Additional cybersecurity certifications such as OSCP, CREST, or GIAC would be advantageous.
- Experience in penetration testing or broader cybersecurity assessment activities would be a plus.
Skills Required
- Recognised university degree in Computer Science, Computer or Electrical Engineering, Information Technology, or a related discipline
- At least 5 years of relevant experience in Identity and Access Management, cybersecurity, or information security
- Strong understanding of IAM concepts, principles, and technologies
- Working knowledge of user provisioning and deprovisioning, PAM, directory services, MFA, SSO, and IGA
- Hands-on experience with one or more IAM solutions, including SailPoint, Okta, ForgeRock, Ping Identity, CyberArk, or BeyondTrust
- Experience implementing, configuring, integrating, and supporting IAM tools and processes in enterprise environments
- Ability to develop scripts or code using at least one programming language, such as Java or Python
- Strong analytical and problem-solving skills, including troubleshooting complex IAM issues
- Excellent verbal and written communication, interpersonal, analytical, and stakeholder management skills
- Ability to work independently and collaboratively in a team environment
- Strong interest and demonstrated passion for information security
- Prior business or technology consulting experience, preferably with a leading consulting or professional services firm
- Experience with IAM solutions across Google Cloud Platform, Amazon Web Services, and/or Microsoft Azure
- Relevant industry certifications such as CISSP, CISA, CISM, SABSA, PRINCE2, TOGAF, or ITIL
- Relevant IAM or solution-level certifications from SailPoint, CyberArk, BeyondTrust, Okta, or ForgeRock/Ping Identity
- Additional cybersecurity certifications such as OSCP, CREST, or GIAC
- Experience in penetration testing or broader cybersecurity assessment activities
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region
