WHAT YOU'LL DO The IT Cloud IAM Architect provides consulting expertise and thought leadership for the internal BCG Identity and Access Management program. The IT Cloud IAM Architect provides technical consulting for identity and access management architecture, design, and strategy; and is responsible for leading technical architecture and product integration for solutions across hybrid on-premises, multi-cloud, and SaaS ecosystems, and influencing engineering decisions and outcomes that drive business success. The IAM Architect ensures the digital applications, tools, and services protect our data, our clients' data, and our intellectual property; are resilient to cyber-attacks; meet BCG policy and standards, regulatory requirements, and industry best practices, while using a risk-based approach to meeting BCG business needs and objectives. As the IT Cloud IAM Architect, design and build forward thinking, authentication and authorization solutions focusing on cloud infrastructure entitlement management and governance. This will include leveraging a large scope of Identity related technologies both on premises and in the cloud. Including Active Directory, Okta, AWS, Azure, and GCP IAM services. Design, document and help train junior resources on new processes and technical solutions relevant to the space. Work as a tier 3 support resource for the client facing Platform team on all identity related tasks. Engage with the Security and Enterprise IT teams to stay aware and aligned on their initiatives in this space. Interface closely with stakeholders and participate as a key stakeholder with internal teams to ensure the needs of the BCG Platform are addressed during new solution deployments. Among your responsibilities, you will: Implementing best practices for Cloud Identity / Cloud Entitlements Management to meet least privilege principles Design and implementation of scalable and secure IAM solutions for AWS and Azure-based applications and systems Managing identity lifecycles across multiple platforms including Active Directory, Azure AD, Okta and AWS Configuration, maintenance, and support for a large-scale Active Directory environment Escalated incident and request support for the Identity and Access Management team Working with tech vendors from across the globe YOU'RE GOOD AT Providing guidance and support to stakeholders on IAM best practices and security requirements Working with security to conduct regular IAM audits and vulnerability assessments to identify and mitigate security risks Documentation and training materials for IAM solutions and best practices Strong understanding of single sign-on and authentication technologies such as SAML, OpenID Connect and Kerberos Troubleshooting complex technical problems Clear and effective communication in a global workforce Drafting technical documentation Time management via agile board and ticketing system Working effectively on a diverse and distributed team on cross-functional initiatives YOU BRING (EXPERIENCE & QUALIFICATIONS) Bachelor's degree (or equivalent experience) in Computer Science, Cybersecurity, Engineering, or a related field. 6+ years of experience working with cloud identity and access management governance and controls 6+ years supporting Identity and Access Management for an enterprise A strong background in Azure security and IAM best practices Experience in an ITIL-based IT organization Experience with cloud service providers like AWS and Azure Experience working in a DevOps environment Expert level knowledge of Role Based Access Control (RBAC) or Attribute Based Access Control (ABAC) Foundational knowledge of SAML and OIDC In-depth understanding of Active Directory sites & replication, administrative structures, group policy services, enterprise security, certificate services and disaster recovery for a large organization YOU'LL WORK WITH This role sits within the Identity and Access Management team. A cross functional, international team of highly trained, high performing professionals. BCG's information technology group collaboratively delivers the latest digital technologies that enable our consultants to lead, and our business to grow.
