Sr. Consultant, Identity & Access Management

Job description

Job Purpose and Impact This role is responsible for designing, engineering, automating, and operating Cargill's enterprise Identity and Access Management (IAM) capabilities. The ideal candidate brings deep IAM expertise and strong engineering fundamentals to deliver secure, scalable, resilient, and business-aligned identity services. Key Accountabilities Key Behavioral Attributes & Soft Skills Takes ownership of assigned work, follows through on commitments, and drives issues to timely resolution. Applies sound security judgment and risk-based decision-making while balancing business needs, compliance requirements, and operational effectiveness. Analyzes and resolves complex technical issues through structured troubleshooting, root cause analysis, and implementation of sustainable solutions. Communicates clearly and collaborates effectively with engineering, operations, security, infrastructure, application, and business stakeholders. Delivers excellent customer service by providing responsive support for end-user and service tickets while adhering to ITSM processes and service-level expectations. Demonstrates operational excellence through automation, documentation, continuous improvement, knowledge sharing, and commitment to learning new technologies and capabilities. Qualifications Required Experience 8+ years of hands-on IAM engineering experience spanning identity platforms, directory services, authentication, access management, identity governance, certificate lifecycle management, automation, integrations, and operational support in enterprise environments. Strong Core Active Directory engineering experience, including design, administration, troubleshooting, and support of AD Domains, Forests, Organizational Units (OUs), Group Policy (GPOs), DNS, replication, trusts, service accounts, and enterprise directory infrastructure. Hands-on experience with enterprise identity technologies such as Active Directory, Microsoft Entra ID, directory synchronization, SSO, MFA, federation, identity stores, service accounts, groups, roles, and access control models. Experience with automation, integration, and modern engineering practices using scripting languages, APIs, Git-based repositories, source control, CI/CD pipelines, and DevOps tooling. Experience with Identity Governance & Administration (IGA), including user lifecycle management, access requests, access reviews, entitlement management, policy administration, compliance, and audit support. Experience integrating IAM services with cloud platforms, ITSM solutions, monitoring tools, enterprise applications, and operational processes. Strong analytical and problem-solving skills, with the ability to troubleshoot complex IAM issues and deliver secure, scalable solutions aligned with business objectives. Experience operationalizing services through runbooks, documentation, monitoring, metrics, knowledge transfer, incident/problem management, and continuous service improvement. Preferred Technical Skills Identity & Access Management: Active Directory, Entra ID, Identity Governance, Authentication, Authorization, SSO, MFA, and related IAM technologies. Automation & Engineering: PowerShell, Python, REST APIs, Git, CI/CD pipelines, Azure DevOps, GitHub/GitLab, GoLang, Terraform, or equivalent automation and DevOps tools. Identity Integrations & Security: OAuth, OIDC, SAML, SCIM, LDAP, PKI, Certificate Lifecycle Management (CLM), and identity security controls. Operations & Service Management: ServiceNow/ITSM integrations, monitoring, incident/problem management, reporting, audit readiness, and continuous improvement. Preferred: Privileged Access Management (PAM), secrets management, privileged governance, and identity threat protection.