Technology Architect, Identity & Access Management

BearingPoint is expanding its Identity and Access Management (IAM) practice within the Security Services portfolio and is seeking an experienced Senior Consultant or Technology Architect to support advisory, architecture, and delivery engagements across leading IAM platforms.

This role focuses on Identity Governance, Access Management, and Privileged Access Management (PAM) solutions, including Saviynt, SailPoint, Okta, Ping Identity, and CyberArk. Strong experience with Microsoft Active Directory and Microsoft Entra ID is also expected; however, the role extends beyond Microsoft technologies and encompasses a broader IAM ecosystem.

You will partner with medium and large enterprise clients on complex IAM transformation programs, identity governance initiatives, access lifecycle management, privileged access controls, and modern authentication architectures. The position combines advisory, architecture, implementation, and selective operational support responsibilities, providing end-to-end involvement across the IAM lifecycle, from strategy and solution design through deployment, operations, and continuous improvement.

Location: Portugal

Primary Functions and Tasks:

• Lead IAM assessments, transformation projects, and solution design initiatives.

• Design and implement Identity Governance (IGA), Access Management, and Privileged Access Management (PAM) solutions.

• Help organizations improve how identities, roles, and access are managed across their business.

• Work with leading IAM platforms, including:

1. Saviynt

2. SailPoint

3. Okta

4. Ping Identity

5. CyberArk

6. Microsoft Active Directory & Entra ID

• Design and optimize Joiner, Mover, and Leaver processes to ensure the right people have the right access at the right time.

• Define role models, access policies, governance controls, and access review processes.

• Design secure authentication solutions, including Single Sign-On (SSO), federation, Multi-Factor Authentication (MFA), and passwordless technologies.

• Support the integration of applications into IAM environments, from access model design and connector configuration to provisioning workflows and knowledge transfer.

• Contribute to security audits and help address findings related to identity governance, privileged access, and compliance requirements.

• Collaborate with clients and colleagues on workshops, solution designs, proposals, and new business opportunities.

We are looking for: 

• We are primarily looking for consultants and architects with hands-on experience in Saviynt, SailPoint, Okta, Ping Identity, CyberArk, or similar enterprise IAM platforms. Experience with Microsoft Active Directory and Entra ID is also expected, although these technologies are not the primary focus of the role.

• Strong hands-on experience with at least one enterprise IAM platform, such as Saviynt, SailPoint, Okta, Ping Identity, or CyberArk.

• Experience working with Microsoft Active Directory and Entra ID.

• Experience integrating IAM solutions with Microsoft 365 and Azure environments.

• 5+ years of experience delivering or contributing to IAM, IGA, or PAM initiatives.

• Advanced English Level.

• Practical experience designing and implementing:

1. Identity Governance

2. Access Lifecycle Management

3. Access Certification

4. Role-Based Access Control (RBAC)

5. Segregation of Duties (SoD) controls

6. Privileged Access Management (PAM)

7. Single Sign-On (SSO) and Federation

8. Multi-Factor Authentication (MFA) and Modern Authentication

• Solid understanding of IAM architecture principles and enterprise security controls.

• Experience collaborating with business stakeholders, security teams, and technical delivery teams.

• Ability to produce architecture documentation, solution designs, and client-facing deliverables.

Nice to Have

• Experience working with hybrid identity architectures.

• Experience supporting audit, compliance, and regulatory requirements.

• Experience contributing to pre-sales activities and business development initiatives.

• French and/or German language skills.

• Relevant vendor certifications in Saviynt, SailPoint, Okta, Ping Identity, CyberArk, or Microsoft Identity technologies.

What You'll Help Us Achieve

• Expand BearingPoint's delivery capabilities across strategic IAM platforms.

• Support the successful delivery of projects where IAM expertise is in high demand.

• Build reusable assets, accelerators, and delivery approaches that enhance project efficiency and consistency.

• Strengthen collaboration between IAM, Microsoft Security, and the broader Security Services practice.

• Contribute to a scalable Security Services portfolio capable of supporting cross-country opportunities and successful delivery engagements.

For more information, please visit: www.linkedin.com/company/bearingpoint

About BearingPoint

BearingPoint is an independent management and technology consultancy with European roots and a global reach. We help businesses transform by combining deep industry expertise with strong capabilities in strategy, operations, and technology. Dedicated SAP and Microsoft transformation units, a strong focus on AI, and outcome-based products enable us to provide tailored, innovative solutions that create measurable and sustainable value.