RBAC & SOD Consultant

About the Role We are seeking an experienced Identity and Access Management (IAM) Consultant to design, implement, and optimize access management solutions with a focus on Role-Based Access Control (RBAC) and Segregation of Duties (SoD) compliance. The consultant will partner with IT, security, audit, and business stakeholders to strengthen enterprise identity governance, mitigate risks, and ensure regulatory compliance. Key Responsibilities Analyze business and technical requirements to design and implement RBAC models aligned with organizational needs. Define, configure, and enforce SoD policies to minimize risks of conflicts and fraud. Conduct access reviews, role mining, and role optimization to improve efficiency and security. Collaborate with business units and compliance teams to document and validate SoD rules and access requirements. Implement and support IAM tools (e.g., SailPoint, Saviynt, Okta, CyberArk, PingIdentity, ForgeRock, etc.) with RBAC/SoD capabilities. Partner with audit and risk management teams to ensure regulatory compliance (SOX, HIPAA, GDPR, PCI-DSS, etc.). Provide IAM governance consulting including policies, standards, and best practices. Assist in user provisioning, de-provisioning, and access certifications. Develop and maintain documentation including RBAC matrices, SoD rulesets, workflows, and reports. Train stakeholders on IAM processes and tools to strengthen adoption and compliance. Required Qualifications Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). 5+ years of experience in IAM consulting, with deep knowledge of RBAC and SoD frameworks. Hands-on experience with one or more IAM platforms (e.g., SailPoint, Saviynt, Okta, ForgeRock, Ping, CyberArk). Strong understanding of identity governance, authentication, authorization, and directory services (LDAP/AD). Experience defining and implementing RBAC models, role mining, and SoD controls. Familiarity with compliance and regulatory frameworks (SOX, HIPAA, GDPR, PCI-DSS). Excellent communication and stakeholder management skills. Preferred Qualifications IAM-related certifications (e.g., CISSP, CISM, CISA, IAM/IGA tool certifications). Experience with cloud IAM and RBAC in AWS, Azure, GCP. Knowledge of risk-based access management and zero trust principles. Experience with automation and scripting (Python, PowerShell, Java, APIs) for IAM workflows. Job Type: Contract Pay: $80.00 - $85.00 per hour Work Location: In person