Identity and Access Management Consultant (Contract)

CoreFactor is searching for an Identity and Access Management Consultant on a contract basis for a client in the GTA.

This position is hybrid and will require the successful consultant to go into the office two (2) times per week.

The Identity and Access Management Consultant will lead our clients IAM strategy, governance, transformation, and operations. The role is accountable for strengthening identity governance, privileged access, authentication, directory services, and access controls across the organization.

Working with Cybersecurity, IT, Human Resources, application owners, Audit, business stakeholders, and service providers, the consultant will deliver sustainable IAM capabilities and provide leadership on identity-related risk, architecture, technology, and operations.

Key Accountabilities

• Own the IAM strategy, roadmap, standards, operating model, and governance framework.
  
• Lead IAM transformation initiatives and transition new capabilities into operations.
  
• Oversee directory services, hybrid identity, authentication, and identity synchronization.
  
• Lead the selection and implementation of identity-governance and privileged-access solutions.
  
• Establish Joiner-Mover-Leaver, access-request, RBAC, and Access Review capabilities.
  
• Oversee privileged-account governance across servers, applications, cloud services, service accounts, and network devices.
  
• Establish standards for credential vaulting, password rotation, session monitoring, emergency access, and exceptions.
  
• Manage IAM vendors, budgets, contracts, projects, service performance, and delivery commitments.
  
• Develop policies, procedures, runbooks, service levels, and performance reporting.
  
• Support audits, risk assessments, incidents, and remediation of IAM control deficiencies.
  
• Lead internal resources, contractors, and external service providers.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline. Equivalent education and experience will be considered.
  
• Seven or more years of experience in IAM, cybersecurity, or infrastructure security.
  
• At least three years leading IAM programs, services, projects, teams, or vendors.
  
• Experience implementing or operating enterprise IAM capabilities in Microsoft-oriented environments.
  
• Experience transitioning IAM solutions from implementation into ongoing operations.
  

Knowledge and Skills

• Strong knowledge of identity governance, lifecycle management, least privilege, RBAC, and access certification.
  
• Knowledge of Active Directory, Microsoft Entra ID, hybrid identity, authentication, and privileged administration.
  
• Experience with leading IGA and PAM platforms. Familiarity with products such as SailPoint, Saviynt, CyberArk, or comparable solutions is an asset.
  
• Understanding of privileged access across Windows, Linux, applications, service accounts, cloud platforms, and network devices.
  
• Familiarity with LDAP, Kerberos, SAML, OAuth, OpenID Connect, RADIUS, TACACS+, and APIs.
  
• Strong leadership, vendor-management, stakeholder-engagement, analytical, and communication skills.
  

Preferred Qualifications

• Experience in a regulated, utility, telecommunications, or critical-infrastructure environment.
  
• Experience with IAM transformation, shared-service integrations, and identity-data remediation.
  
• Familiarity with NIST, ISO 27001, or CIS security frameworks.
  
• ​Certifications such as CISSP, CISM, CISA, Microsoft identity certifications, or relevant IAM/PAM platform certifications.