Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Identity and Access Management Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.
Tailor your resume to this Senior Identity and Access Management Consultant role.
Rezi rewrites your resume against Aon Corporation's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Identity and Access Management Consultant posting at Aon Corporation — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Identity and Access Management Consultant posting at Aon Corporation — free, in seconds.
About the Role
Aon is seeking a Senior Identity and Access Management (IAM) Consultant to join our Digital M&A Advisory practice. The team advises clients on technology, IT, cyber, and digital risks across acquisitions and transformations. This role is for a technical IAM specialist with hands-on experience in Active Directory, identity lifecycle processes, privileged access, and hybrid cloud identity. You will act as the technical IAM lead, assessing identity security posture and communicating findings to stakeholders.
Responsibilities
- Leading the identity and access management elements of engagements across private equity and corporate clients.
- Leading technical identity and access management reviews as part of cyber due diligence, technical review and portfolio company engagements.
- Assessing Active Directory design and security, including forest and domain architecture, trusts, OU structure, Group Policy, domain controller security and tiered administration models.
- Reviewing security group design and membership, including privileged groups, nested groups, delegated permissions and excessive or inherited access.
- Assessing account management against best practice, including privileged, service, shared, generic, stale and dormant accounts, password policies, credential hygiene and account naming and ownership standards.
- Reviewing Joiner-Mover-Leaver (JML) processes, including HR-driven provisioning, timeliness of de-provisioning, role changes, access recertification and alignment between HR and IT records.
- Evaluating privileged access management (PAM), including just-in-time access, credential vaulting, session monitoring and break-glass accounts.
- Assessing hybrid and cloud identity, including Microsoft Entra ID, Entra Connect synchronisation, conditional access, MFA coverage, SSO and federation.
- Reviewing identity governance and administration (IGA), including role-based access control, segregation of duties and access review processes.
- Translating technical findings into prioritised, commercially relevant risks, remediation roadmaps and cost estimates for investors and management teams.
- Producing high-quality reports, presentations and executive briefings.
- Leading technical workstreams and supporting engagement delivery across multiple concurrent projects.
- Working closely with colleagues across technology, cyber, M&A and risk advisory disciplines.
- Contributing to the development of the team's technical review methodologies, identity assessment tooling and market offerings.
- Supporting client engagements across the UK and EMEA.
Requirements
- Demonstrable experience in identity and access management, Active Directory engineering, infrastructure security, security consulting or a related technical role.
- Strong, hands-on experience building, administering, securing and assessing Active Directory environments, including security groups, delegation and account management best practices.
- Practical experience designing, operating or assessing Joiner-Mover-Leaver (JML) processes and identity lifecycle controls.
- Experience designing, implementing or assessing Active Directory architecture, trusts, Group Policy and tiered administration.
- Experience designing, implementing or assessing security group design, delegation and least-privilege access.
- Experience designing, implementing or assessing privileged, service and shared account management.
- Experience designing, implementing or assessing Microsoft Entra ID, Entra Connect and hybrid identity.
- Experience designing, implementing or assessing conditional access, MFA, SSO and federation (e.g. ADFS, Okta, Ping).
- Experience designing, implementing or assessing privileged access management (e.g. CyberArk, BeyondTrust, Delinea, Entra PIM).
- Experience designing, implementing or assessing identity governance and administration (e.g. SailPoint, Saviynt, Entra ID Governance).
- Experience designing, implementing or assessing JML automation and HR-to-identity integration.
- Experience designing, implementing or assessing access recertification and segregation of duties.
- Experience designing, implementing or assessing AD recovery, backup and resilience.
- Familiarity with Microsoft Enterprise Access Model and tiered administration guidance.
- Familiarity with CIS Benchmarks and CIS Critical Security Controls.
- Familiarity with NIST CSF and NIST SP 800-63 (Digital Identity Guidelines).
- Familiarity with NIST SP 800-207 (Zero Trust Architecture).
- Familiarity with ISO 27001.
- Familiarity with NCSC identity and access management guidance.
- Understanding of common identity attack techniques and their impact on critical business assets.
- Ability to interpret AD exports, PowerShell output, group membership reports and outputs from AD assessment tools.
- Experience identifying and assessing identity and cyber risks within sophisticated environments.
- Ability to communicate technical findings and business implications to both technical and non-technical stakeholders.
- Strong analytical and problem-solving skills.
- Commercial awareness and the ability to understand business implications of technology and security decisions.
- Excellent written and verbal communication skills.
- Experience managing technical workstreams and contributing to successful project delivery.
- Strong stakeholder management and presentation skills.
- Ability to engage effectively with both technical teams and senior business executives.
- Experience developing positive client relationships.
- Comfortable working within multidisciplinary and global teams and fast-paced consulting environments.
- Ability to handle multiple engagements and competing priorities.
- Highly organised with strong attention to detail and quality.
- Experience of AD consolidation, domain or tenant-to-tenant migrations, or identity separation and integration programmes.
- Exposure to attack path analysis, exposure management or cyber risk quantification platforms.
- Experience of AD security assessments, compromise recovery or identity-focused incident response.
- Experience with AWS IAM or Google Cloud identity in multi-cloud environments.
- Experience working with private equity-backed businesses or large corporate organisations.
- Experience mentoring junior team members or supporting team development initiatives.
- Interest in business development and market-facing activities.
- Experience or interest in line management and supporting client relationship management.
Skills
- Identity and Access Management (IAM)
- Active Directory Engineering
- Infrastructure Security
- Security Consulting
- Active Directory Administration
- Active Directory Security
- Security Groups
- Delegation
- Account Management
- Joiner-Mover-Leaver (JML) Processes
- Identity Lifecycle Controls
- Active Directory Architecture
- Group Policy
- Tiered Administration
- Least-Privilege Access
- Privileged Account Management
- Service Account Management
- Shared Account Management
- Microsoft Entra ID
- Entra Connect
- Hybrid Identity
- Conditional Access
- Multi-Factor Authentication (MFA)
- Single Sign-On (SSO)
- Federation (ADFS, Okta, Ping)
- Privileged Access Management (PAM)
- CyberArk
- BeyondTrust
- Delinea
- Entra PIM
- Identity Governance and Administration (IGA)
- SailPoint
- Saviynt
- Entra ID Governance
- JML Automation
- HR-to-Identity Integration
- Access Recertification
- Segregation of Duties
- AD Recovery
- AD Backup
- AD Resilience
- Microsoft Enterprise Access Model
- CIS Benchmarks
- CIS Critical Security Controls
- NIST CSF
- NIST SP 800-63
- NIST SP 800-207
- Zero Trust Architecture
- ISO 27001
- NCSC Guidance
- Identity Attack Techniques
- PowerShell
- AD Exports Analysis
- AD Assessment Tools
- Risk Assessment
- Problem-Solving
- Commercial Awareness
- Communication Skills
- Stakeholder Management
- Presentation Skills
- Client Relationship Management
- Teamwork
- AD Consolidation
- Domain Migration
- Tenant-to-Tenant Migration
- Identity Separation
- Identity Integration
- Attack Path Analysis
- Exposure Management
- Cyber Risk Quantification
- AD Security Assessment
- Compromise Recovery
- Incident Response
- AWS IAM
- Google Cloud Identity
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- CyberArk Defender
- CyberArk Sentry
- SailPoint Certified IdentityIQ Engineer
- CISSP
- CISM
- Business Development
- Line Management
Location
- London
Work Type
- Full-time
Experience Level
- Senior
About the Company
- Headquartered in London, Aon Plc is a leading global professional services firm providing a broad range of risk, retirement and health solutions.
- Our 50,000 colleagues in 120 countries empower results for clients by using proprietary data and analytics to deliver insights that reduce volatility and improve performance.
Equal Opportunity
- Aon is an equal opportunities employer.
- Aon's recruitment and selection policy ensures the best possible skill mix of colleagues and the highest quality candidates are appointed using objective job-related criteria.