In a client-facing consulting role, you will work on exciting projects that transform our client's solutions with a focus on the Microsoft Digital Identity capabilities as well as other leading market vendors (e.g. Saviynt & One Identity). As a member of our security practice, you will work for both Avanade and Accenture clients, ranging from medium to large global enterprise clients.
Chargeable individuals who design and implement solutions to ensure people have the appropriate access. Including Authentication, Authorization, Administration & Auditing, Identity Lifecyle Management, RBAC, External Identities (B2B and CIAM), Privileged Access Management (PAM) and implement Zero Trust Principles.
Key Accountabilities: - Develop and implement modern authentication solutions (OAuth, SAML, token-based authentication, claims transformations).
- Manage identities and authentication services using Microsoft Entra ID, including SSO, Conditional Access, MFA, PIM, and authentication methods.
- Enhance and secure Active Directory environments, including AD tiered models, GPOs, DNS, PKI/Certification Authority, and AD recovery.
- Manage IAM lifecycle processes (provisioning, deprovisioning, JML, IGA).
- Configure and maintain Entra ID Hybrid Sync and application provisioning (SCIM, custom attributes).
- Develop and implement External Identity solutions including Customer Identity and Access Management (CIAM)
- Troubleshoot and resolve complex IAM issues across AD, Entra ID, and authentication flows.
- Lead or contribute to solution design and delivery for identity projects.
- Collaborate with cross-functional teams and stakeholders in an agile environment.
- Support privileged access management and secrets management initiatives.
QualificationsJob Qualifications:- 7+ years' experience in Identity and Access Management (IAM), with a strong focus on Microsoft Entra ID (Azure AD).
- Experienced in consulting and advisory discussions with clients and other consulting firms.
- SC-300 - Microsoft Certified: Identity and Access Administrator Associate
- Proven understanding of Active Directory and legacy authentication protocols (LDAP, Kerberos, NTLM, etc.), Entra ID Sync.
- Demonstrated expertise with Entra ID and Entra ID Domain Services, including relevant use cases.
- Skilled in managing identities, setting up conditional access, implementing multi-factor authentication, configuring global secure access (Entra Internet Access & Private Access) and overseeing identity governance with Microsoft Entra ID.
- Experience with modern authentication protocols and integrating applications using those protocols.
- Experience leading small to medium project general design and delivery (solution architecture and associated infrastructure or business and functional requirements).
- Understanding of the business, privacy, security, and compliance challenges surrounding Digital Identities and a passion for solving these challenges for clients.
- Experience of privileged access management solutions and an understanding of secrets management.
Nice to have- Experience with additional IAM platforms such as Auth0, Ping Identity, or ForgeRock.
- Scripting and automation capabilities using Python PowerShell, or similar languages to extend IAM functionality.
Compensation at Avanade varies depending on a wide array of factors, which may include but are not limited to the specific office location, role, skill set, and level of experience. As required by local law, Avanade provides a reasonable range of compensation, based on full-time employment, for roles that may be hired as set forth below.
The recruiting efforts for this position are intended to fill a brand new position.
The base pay range shown below is intended as a guideline to reflect the majority of offers for this role.
It does not represent a maximum limit - in some cases, actual compensation may exceed the range where appropriate.
See more information on our benefits here: Canada Employee Benefits | Avanade
Role Location Annual Salary Range British Columbia/Ontario $114,400 to $135,850
