IT Consultant - Identity & Access Management

IT Consultant Strategic Activities IAM Strategy & Roadmap: Support a long-term IAM strategy, aligning identity/access management initiatives with business goals and security best practices. Define the IAM architecture and collaborate to create a roadmap for implementing new IAM technologies and processes. Governance & Compliance: Establish and enforce IAM policies and standards to ensure compliance with regulations and internal security requirements. Advise senior leadership on IAM risk and governance matters, integrating IAM considerations into broader IT and security strategies. Cross-Functional Collaboration: Work closely with IT, security, and business units to integrate IAM into projects and operations, coordinating identity integration during organizational changes and serving as an IAM subject matter expert in committees and planning groups. Tactical Activities Implementation of IAM Solutions: Configure IAM technologies, including SSO, MFA, identity federation, and privileged access management tools, and customize platforms or scripts for provisioning and deprovisioning. User Lifecycle & Access Management: Manage end-to-end user identity lifecycle processes, ensuring timely provisioning, role changes, and terminations, maintaining RBAC frameworks, and conducting access recertification and audits. Security Monitoring & Issue Resolution: Define monitoring strategy for IAM systems, respond to identity-related security incidents, troubleshoot technical issues, and provide support and documentation for complex access requests. Continuous Improvement & Integration: Stay updated on IAM best practices, recommend and implement improvements to enhance security and user experience, and integrate new applications and services into the IAM framework. Education/Training Bachelor’s Degree: In Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent work experience. Required Experience Identity & Access Management: 5+ years of experience with significant focus on IAM, including implementation or management of IAM solutions in a complex enterprise environment. Azure AD/Entra & Active Directory Expertise: Strong experience with Microsoft Active Directory (on‑premises) and Azure Active Directory/Microsoft Entra ID in a hybrid environment, including AD synchronization, migration, and hybrid identity troubleshooting. Technology Implementation Track Record: Demonstrated ability to design and implement IAM technologies, such as enterprise SSO, MFA roll‑out, identity governance, or privileged account management. Project Leadership: Experience leading or significantly contributing to IT security or IAM projects, coordinating across teams, managing timelines, and working with vendors or consultants. Security & Compliance Experience: Understanding of how IAM supports compliance standards (e.g., SOX, HIPAA, GDPR) and experience passing security audits and assessments related to access management. Preferred Experience Sector Experience (Healthcare/Education): Prior experience in an academic medical center, university, or healthcare environment is strongly preferred. Mergers & Identity Consolidation: Experience with merging or consolidating identity systems during mergers or IT integrations. Cloud IAM & Digital Transformation: Involvement in large‑scale cloud adoption projects, specifically handling the IAM portion. Required Skills IAM Domain Knowledge: Deep understanding of identity and access management concepts, protocols, and best practices, including authentication technologies and authorization models. Microsoft Identity & Cloud Skills: Expert skills in administering Active Directory and Azure Active Directory, including AD forests/domains, Azure AD Connect, Conditional Access, and automation via PowerShell. Security Mindset: Ability to identify vulnerabilities and implement measures such as MFA, device compliance, and zero‑trust controls. Analytical Problem‑Solving: Skill to diagnose and resolve complex identity/access issues with attention to detail. Communication & Documentation: Clear verbal and written communication, ability to explain IAM concepts, write policies, guides, and runbooks, and train technical staff. Collaboration & Teamwork: Ability to work with multiple teams across Duke Health and Duke University, gathering requirements and driving alignment. Preferred Skills Certifications: CISSP, CISM, or Microsoft Certified: Azure Solutions Architect / Identity and Access Administrator. Additional IAM Tools & Technologies: Experience with SailPoint, Okta, CyberArk, AWS IAM, or similar. Industry‑Specific IAM Knowledge: Knowledge of healthcare or educational IAM needs, HIPAA/FERPA regulations, and related policy impacts. Change Management & User Education: Experience in change management activities, user communication plans, training sessions, and support resources for new IAM solutions. Leadership & Mentoring: Ability to lead and mentor others in IAM best practices. Equal Opportunity Employer Statement Duke is an Equal Opportunity Employer committed to providing employment opportunity without regard to an individual's age, color, disability, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex (including pregnancy and pregnancy‑related conditions), sexual orientation or military status. Essential Physical Job Functions Certain jobs at Duke University and Duke University Health System may include essential job functions that require specific physical and/or mental abilities. Additional information and provision for requests for reasonable accommodation will be provided by each hiring department. #J-18808-Ljbffr