IAM Consultant | Enterprise Security Team @Deloitte

Description & Requirements
Who we are looking for
✔ Do you have hands-on experience implementing and configuring IAM platforms such as SailPoint, Saviynt, CyberArk, Okta, or Microsoft Entra ID, and want to bring identity security to life for complex client organizations?
✔ Are you a consultant-minded professional who enjoys translating identity governance challenges into practical, scalable solutions while engaging with both technical and business stakeholders?
✔ Do you thrive in project-based environments, juggling discovery workshops, technical builds, and client presentations across dynamic, cross-functional teams?

If you're motivated by helping organizations strengthen how they manage identities, access, and privilege — all within a collaborative, international consulting environment — we'd love to meet you

What we expect from you
Essential:

• Hands-on experience with IAM technologies such as Microsoft Entra ID, SailPoint, Saviynt, CyberArk, Delinea, Okta, Ping Identity, or similar platforms
• Strong understanding of identity governance, role-based access control, access certifications, privileged access management, and identity lifecycle management
• Knowledge of authentication and federation standards including SAML, OAuth2, OpenID Connect, and MFA technologies
• Ability to communicate technical concepts to both technical and business audiences and facilitate client discussions and workshops
• Experience working in consulting, advisory, or client-facing environments is highly valued
• Proficiency in English (written and spoken)
• EU passport

Nice to have:

• Relevant certifications such as CISSP, Microsoft, SailPoint, CyberArk, or Okta certifications
• Hyperscaler certifications (AWS, Azure, or GCP) or Netskope certification
• Proficiency in German

Your future role
As an IAM Consultant, you'll work alongside experienced professionals to help clients design, build, and operate identity solutions that protect their most critical assets. You'll play an active role in shaping how organizations govern access, manage privilege, and bring identity security into hybrid and cloud environments.

Your responsibilities:

• Design, configure, and implement Identity Governance & Administration (IGA) solutions — joiner-mover-leaver lifecycle, access certification campaigns, role-based and attribute-based access control (RBAC/ABAC), and Segregation of Duties (SoD) controls
• Build and customize identity workflows, connectors, and integrations (SCIM, REST/SOAP APIs, LDAP, SQL) between IAM platforms and enterprise applications, directories, and HR systems of record
• Support hands-on deployment and configuration of platforms such as SailPoint (IdentityNow / IdentityIQ), Okta, Microsoft Entra ID, CyberArk, Saviynt, Ping, One Identity, or BeyondTrust
• Translate client requirements into technical designs — running discovery workshops, documenting current/future-state architecture, and presenting recommendations directly to client stakeholders
• Conduct identity risk assessments and maturity reviews, identifying gaps in access governance, authentication, and privileged access controls
• Support integration of IAM capabilities into hybrid and cloud environments (Azure AD/Entra ID, AWS IAM, GCP IAM)
• Partner with project leads on the full delivery lifecycle: requirements, design, build, test, deployment, and post-go-live support
• Mentor junior team members and contribute to growing Deloitte's IAM methodologies, accelerators, and points of view

What we offer
Join us and become a part of an expert team, working on innovative cybersecurity projects for leading clients around the world. Gain valuable experience with the latest security technologies while driving impactful solutions that make a real difference. Play a crucial role in shaping and delivering cyber-domain projects, while continuously expanding your knowledge and skills in a supportive environment that values professional growth.

Fringe benefits:

• Discretionary annual performance bonus
• Working in Hybrid Mode with flexible adjustment
• Flexible Benefits Plan – an allowance per month for benefits (e.g. medical subscription, meal tickets, private pension)
• 2 additional days off per year for medical leave without a medical certificate
• Comprehensive travel insurance (both work and personal travel)
• Days off for special personal events, according to the Internal Regulations
• Bookster subscription
• Learning & Development: LinkedIn Learning, Udemy for Business, getAbstract
• Employee Assistance Program: 24/7 consultancy (financial, psychological, legal)
• Teleworking allowance

Selection process

• Phone screening with HR (10-15 min)
• First Technical interview (45-60 min)
• Final interview (45-60 min)
• Welcome on Board!