The following requirement is open with our client.
Title : IAM Consultant
Location : Boston, MA
Duration : 12 Months
Relevant Experience (in Yrs.) :
Detailed Job Description:
We are seeking a high-caliber, IAM Consultant / Delivery Lead to spearhead our Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Hardening initiative. In this client-facing role, you will be the primary driver of technical and strategic discussions, specifically focusing on migrating our enterprise to phishing-resistant MFA using Microsoft Entra ID/ForgeRock.
Role Overview
• Core Focus: Client relationship management, Application Onboarding to Entra / ForgeRock, Entra ID MFA architecture/hardening, and phishing-resistant deployment (FIDO2, Windows Hello for Business, Certificate-Based Authentication).
" • Lead and facilitate high-stakes client calls, workshops, and steering committee meetings to drive alignment on MFA hardening strategies.
• Translate complex Microsoft Entra ID technical architectures into clear, business-oriented risk reduction outcomes for executive stakeholders.
• Manage client expectations, handle objections regarding user friction, and proactively resolve project roadblocks.
• Draft technical roadmaps, deployment playbooks, and change management communication frameworks for the client.
Technical Execution & Architecture
• Drive the design, configuration, and rollout of phishing-resistant MFA methods within Microsoft Entra ID, including:
o FIDO2 security keys (e.g., YubiKeys)
o Windows Hello for Business (WHfB)
o Microsoft Entra Certificate-Based Authentication (CBA)
• Application Onboarding to Entra / ForgeRock using OIC / SAML / Reverse Proxy approach
• Drive the activities and guide the team on the strategic approach for migration.
• Design and enforce strict Entra ID Conditional Access policies (e.g., requiring authentication strength policies, device compliance, and risk-based sign-ins).
• Orchestrate the decommissioning of legacy, phishable authentication methods (SMS, voice, and standard Microsoft Authenticator push notifications without number matching).
• Evaluate and mitigate edge cases such as break-glass accounts, service accounts, and non-corporate device access.
Must Have Skill
IAM Consultant,
ForgeRock
Site Minder Migration
