Iam Consultant Forgerock

• Lead Consulting Experience: Demonstrated experience in cybersecurity consulting or IAM engineering, with a proven track record of leading client-facing engagements.
• Entra ID Expertise: Deep, hands-on experience hardening enterprise Microsoft Entra ID (formerly Azure AD) environments.
• Phishing-Resistant MFA Blueprinting: Proven experience deploying FIDO2 security keys, Windows Hello for Business (WHfB), or Certificate-Based Authentication (CBA) at scale across a large user base.
• Conditional Access Mastery: Advanced knowledge of building, testing, and troubleshooting complex Conditional Access architectures.

• Client Leadership & Communication
• Lead and facilitate high-stakes client calls, workshops, and steering committee meetings to drive alignment on MFA hardening strategies.
• Translate complex Microsoft Entra ID technical architectures into clear, business-oriented risk-reduction outcomes for executive stakeholders.
• Manage client expectations, address concerns regarding user friction, and proactively resolve project roadblocks.
• Draft technical roadmaps, deployment playbooks, and change-management communication frameworks for the client.

• Drive the design, configuration, and rollout of phishing-resistant MFA methods within Microsoft Entra ID, including:
• FIDO2 security keys (for example, YubiKeys)
• Windows Hello for Business (WHfB)
• Microsoft Entra Certificate-Based Authentication (CBA)
• Application onboarding to Entra ID or ForgeRock using OIC, SAML, or a reverse-proxy approach.
• Drive delivery activities and guide the team on the strategic migration approach.
• Design and enforce strict Entra ID Conditional Access policies, including authentication strength, device compliance, and risk-based sign-in requirements.
• Orchestrate the decommissioning of legacy, phishable authentication methods, including SMS, voice, and standard Microsoft Authenticator push notifications without number matching.
• Evaluate and mitigate edge cases such as break-glass accounts, service accounts, and access from non-corporate devices.

Qualifications

BACHELOR OF COMPUTER SCIENCE