New

Senior Technical Consultant - Identity and Access Management

AHEAD
vision insurance, paid time off, 401(k)
United States, Illinois, Chicago
401 North Michigan Avenue (Show on map)
Mar 24, 2026
AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation. At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. Sr. Technical Consultants collaborate with a diverse team of consultants with varying skills to meet and exceed client expectations through scoped engagements. They effectively support client engagements, onsite or remotely, by guiding them toward scoped objectives and troubleshooting to resolve project risks or issues. Sr. Technical Consultants contribute to engagements by executing project tasks, producing expected collateral, and presenting artifacts throughout an engagement. Sr. Technical Consultants can also support business development activities alongside a sales specialist to help qualify client needs and expectations, demonstrate capabilities, and contribute to sales proposals. Lastly, AHEAD Sr. Technical Consultants leverage their visibility and experience to contribute to the continuous improvement and maturation of in-practice service offerings and capabilities through thought leadership and mentorship. Senior Technical Consultant (Identity Engagement Manager)This role is for a Senior Technical Consultant who is both technical and consultative, able to own Identity engagements with clients from start to finish. The Identity Engagement Manager will lead and deliver identity-focused engagements across workforce IAM, IGA, PAM, and access/entitlement governance, aligning strategy and implementation to client business and security outcomes. This is a multi-vendor role focused on delivering measurable identity outcomes, not a single-platform position. Responsibilities Lead identity engagements from discovery through architecture, implementation, and closeout, ensuring delivery against scoped objectives. Serve as a technical and consultative lead across workforce IAM, IGA, PAM, and access/entitlement governance. Drive identity assessments, technical roadmaps, and implementation plans that align with business and security priorities. Lead implementations and optimizations across leading identity platforms based on client needs and scope. Support PAM initiatives, including privileged lifecycle controls, vaulting patterns, JIT access models, and access workflows. Support governance initiatives, including access request workflows, access reviews/certifications, role and policy model improvement, and audit-ready outcomes where applicable. Support access and entitlement visibility initiatives across SaaS, cloud, and data platforms where applicable. Design and implement workforce identity capabilities, including SSO, MFA, conditional access, and lifecycle automation with modern federation patterns (SAML, OAuth, OIDC). When in scope, plan and execute directory and cloud identity modernization efforts, including hybrid integration and migration activities. Troubleshoot identity infrastructure issues and provide advanced technical support and guidance. Develop identity policies, procedures, standards, and documentation; perform technical health checks across identity platforms and environments. Contribute to business development by helping qualify identity needs and supporting proposals. Mentor team members and contribute to the evolution of AHEAD identity service offerings. Requirements 5+ years of identity and access management experience across one or more of workforce IAM, IGA, PAM, and access/entitlement governance. Consulting experience leading client identity engagements end-to-end is required, including discovery, requirements, solution design, delivery leadership, and executive-ready documentation. In-depth knowledge of SSO, MFA, directory services, federation protocols, lifecycle automation, and cloud identity management. Proven experience with complex provisioning/de-provisioning and identity lifecycle scenarios. Familiarity with common security and compliance frameworks (e.g., SOX, HIPAA, GDPR). Proficiency with RESTful APIs and scripting; ability to produce clear technical documentation. Strong analytical, problem-solving, and project management skills. Ability to mentor and lead within multi-workstream delivery. Strong client-facing communication skills with the ability to translate technical identity concepts into actionable recommendations. Certifications are required. Candidates must hold at least one current identity-related certification. We prioritize candidates with certifications aligned to Delinea and Microsoft Entra ID, followed by Okta, CyberArk, Veza, SailPoint, or comparable identity platforms. Preferred Qualifications The ideal candidate brings strong delivery experience with Delinea and strong experience with Microsoft Entra ID. Experience with Okta, CyberArk, Veza, and/or SailPoint is beneficial. Experience delivering identity programs that span multiple platforms and identity domains (IAM/IGA/PAM/entitlement governance). The compensation range indicated in this posting reflects the On-Target Earnings ("OTE") for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate's relevant experience, qualifications, and geographic location. Why AHEAD: Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between. We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning. USA Employment Benefits include: - Medical, Dental, and Vision Insurance - 401(k) - Paid company holidays - Paid time off - Paid parental and caregiver leave - Plus more! See benefits https://www.aheadbenefits.com/ for additional details. Use of AI: We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, or to capture recordings and create transcriptions or summaries during interviews. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please refer to the Candidate Privacy Notice or contact us at privacy@ahead.com. You may opt-out of the review or analysis of your application and resume by AI tools by using the General Application. Please include the role you wish to apply for in the Additional Information field. You may also choose to opt-out of recording and transcription at any time, including after joining an interview. Candidates will not be penalized for choosing to opt-out.