Lead Consultant; Identity Access Management Engineer

Position: Lead Consultant (Identity Access Management Engineer)
Location: Glen Allen
##

Job Description # Lead Consultant (Identity Access Management Engineer)
Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We provide a continuum of services, including strategy and enablement, innovation and productivity, and technology foundations to drive better results and bring more value to our clients. Apex transforms our customers with modern enterprise solutions tailored to the industries we serve.

Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the Commercial Segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit .
* Architect end-to-end identity projects including requirements gathering, solution design, development, implementation, testing, and deployment with primary focus on identity platforms (e.g., SailPoint Identity Now, Security Cloud/Identity

IQ and Saviynt).
* Design and configure comprehensive identity governance and administration (IGA) processes including access request workflows, automated provisioning/de-provisioning, role management, access certification campaigns, and policy enforcement.
* Configure and customize identity infrastructure and environments, develop custom connectors and APIs, integrate with cloud platforms (e.g., Azure, AWS), identity providers (e.g., Microsoft Entra, Okta), PAM solutions (e.g., Cyber Ark), and establish connectivity with enterprise applications and authoritative sources.
* Lead assessments of existing identity infrastructure, identify security gaps and vulnerabilities, and recommend strategies aligned with business objectives and regulatory requirements.
* Lead cross-functional teams, including security, IT operations, and application teams, to ensure seamless integration of identity solutions and translate business requirements into technical implementations.
* Develop detailed implementation guides, configuration documentation, test plans, runbooks, and establish metrics that provide visibility into identity ecosystem performance and efficiency.
* Support technical aspects of pre-sales activities, assist with solution scoping, and contribute technical expertise to proposal development and client presentations.
* Provide guidance and mentorship to junior team members and maintain awareness of emerging trends and technologies in the identity space.
* 6+ years of experience in enterprise identity and access management with demonstrated expertise in access governance, identity lifecycle management, and compliance frameworks.
* Direct experience with IGA platforms including (e.g., SailPoint Identity Security Cloud/ Identity

IQ, Saviynt) with ability to design, configure, and customize workflows, rules, and connectors.
* Experience integrating or configuring identity providers such as Microsoft Entra, Okta, or similar solutions in enterprise environments.
* Integration experience with privileged access management (PAM) tools such as Cyber Ark, Hashi Corp Vault, or Delinea.
* Direct experience with cloud identity services and APIs in Azure, AWS, or Google Cloud Platform environments.
* Experience with authentication technologies and protocols including SSO, SAML, OIDC, OAuth, LDAP, and SCIM implementations.
* Proven history of developing governance documentation, technical procedures, and compliance artifacts with consideration of security controls and regulatory frameworks.
* Experience collaborating with cross-functional teams to gather requirements, assess system impacts, and ensure successful identity platform deployments.
* Strong background in developing and implementing role-based access control (RBAC) models, access policies, and separation of duties (SoD) frameworks.
* Experience working with technical teams and contributing to project deliverables with ability to communicate effectively with both technical and non-technical stakeholders.
* SailPoint Professional certification strongly preferred, other certifications (e.g., Saviynt, Microsoft Entra, Cyber Ark, Okta, etc.) preferred.
* Deep understanding of identity principles, concepts, and best practices including…