Start searching
Back to Jobs
Recently postedOther

IAM Consultant

ASCII Group LLCBoston, MA🇺🇸United States

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationBoston, MA, United States
OnboardingMFASAMLComplianceIAM

Job description

The following requirement is open with our client.

Title : IAM Consultant

Location : Boston, MA

Duration : 12 Months

Relevant Experience (in Yrs.) :

Detailed Job Description:
We are seeking a high-caliber, IAM Consultant / Delivery Lead to spearhead our Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Hardening initiative. In this client-facing role, you will be the primary driver of technical and strategic discussions, specifically focusing on migrating our enterprise to phishing-resistant MFA using Microsoft Entra ID/ForgeRock.
Role Overview
• Core Focus: Client relationship management, Application Onboarding to Entra / ForgeRock, Entra ID MFA architecture/hardening, and phishing-resistant deployment (FIDO2, Windows Hello for Business, Certificate-Based Authentication).

" • Lead and facilitate high-stakes client calls, workshops, and steering committee meetings to drive alignment on MFA hardening strategies.

• Translate complex Microsoft Entra ID technical architectures into clear, business-oriented risk reduction outcomes for executive stakeholders.

• Manage client expectations, handle objections regarding user friction, and proactively resolve project roadblocks.

• Draft technical roadmaps, deployment playbooks, and change management communication frameworks for the client.

Technical Execution & Architecture

• Drive the design, configuration, and rollout of phishing-resistant MFA methods within Microsoft Entra ID, including:

o FIDO2 security keys (e.g., YubiKeys)

o Windows Hello for Business (WHfB)

o Microsoft Entra Certificate-Based Authentication (CBA)

• Application Onboarding to Entra / ForgeRock using OIC / SAML / Reverse Proxy approach

• Drive the activities and guide the team on the strategic approach for migration.

• Design and enforce strict Entra ID Conditional Access policies (e.g., requiring authentication strength policies, device compliance, and risk-based sign-ins).

• Orchestrate the decommissioning of legacy, phishable authentication methods (SMS, voice, and standard Microsoft Authenticator push notifications without number matching).

• Evaluate and mitigate edge cases such as break-glass accounts, service accounts, and non-corporate device access.
Must Have Skill

IAM Consultant,
ForgeRock

Site Minder Migration

Similar jobs

Apply