Principal Technical Consultant, Security

AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation.

At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD.

We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived.

We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD.

The Principal Technical Consultant (PTC) Identity Focused Security Architect is a hands‑on delivery leader who designs and leads identity solution implementations in client environments. You will own identity work streams end to end, driving architecture, implementation planning, execution oversight, and stakeholder alignment, primarily across Microsoft identity (Active Directory and Entra ), IGA, and modern authentication patterns (SSO, MFA, password less). Experience with other IAM platforms (e.g., Okta) and PAM (e.g., Delinea, Cyber Ark) experience is a plus.

• Lead identity work streams from discovery and current state analysis through target state architecture, implementation planning, delivery oversight, and closeout.
• Design and deliver Microsoft identity solutions with a deep focus on Active Directory and Microsoft Entra , including hybrid identity patterns where applicable.
• Drive the technical approach for modern authentication and federation capabilities, including SSO, MFA, and password less.

• Lead and or execute IGA-focused deliverables such as:
• Joiner mover-leaver lifecycle processes
• Provisioning and deprovisioning patterns
• Access request workflows where applicable
• Role and policy model improvement to reduce risk and increase operational clarity

• Apply and communicate access control methodologies, including RBAC, ABAC, and PBAC, translating business requirements into implementable identity and authorization designs.

• Own day-to-day technical leadership with clients: requirements sessions, whiteboarding, design reviews, implementation coordination, and executive-ready communication.
• Coordinate delivery across client stakeholders (engineering teams through senior security leaders) to align on priorities, sequencing, and execution plans.
• Produce clear, high-quality deliverables (architecture diagrams, implementation plans, runbooks, and decision documentation).

• Strong Microsoft identity architecture and implementation experience, especially Active Directory and Entra .
• Hands‑on IGA knowledge and delivery experience in real client environments.
• Strong understanding of access control methodologies: RBAC, ABAC, PBAC.
• Strong authentication expertise: SSO, MFA, password less, with design and implementation level understanding.
• Demonstrated ability to lead implementation, not just advise; planning, execution oversight, and delivery ownership.
• Proven client-facing consulting capability: stakeholder management, clear communication, and whiteboard‑ready technical leadership.

• Support implementations or integrations with other IAM platforms (Okta or comparable solutions).
• Contribute to or…