Lead IAM Consultant in Crawley

The Role

TCS is looking for Lead IAM Consultant who will be responsible for leading the delivery of the IAM Data Discovery, Reconciliation and Baselining Programme for a large airline in UK, working closely with business stakeholders, application owners, IAM SMEs and technical teams. The role will focus on establishing a trusted and repeatable IAM control baseline through identity data reconciliation, application IAM data discovery, current-state control analysis, gap identification, and the development of prioritised recommendations.

The consultant will act as the primary IAM subject matter expert, providing leadership across stakeholder engagement, data analysis, control-state evaluation, findings development and executive reporting.

Your responsibilities:

Programme Leadership & Stakeholder Engagement

• Lead IAM discovery, reconciliation and baselining activities across the enterprise.

• Facilitate workshops with business stakeholders, application owners and technical SMEs.

• Work with HRMS, Active Directory, MIM, PAM, ServiceNow and application teams to gather and validate information.

• Establish strong relationships with customer stakeholders and act as the primary IAM advisor.

• Manage dependencies, risks, assumptions and stakeholder expectations throughout the engagement.

• Present findings, recommendations and progress updates to senior business and technology stakeholders.

Data Discovery & Reconciliation

• Lead collection and validation of identity and access management data from authoritative sources.

• Can guide the team of IAM analyst in developing scripts for Data extraction, reconciliation, .csv/excel processing

• Reconcile identity, account, entitlement and ownership data across multiple platforms.

• Validate completeness, coverage and confidence of collected data.

• Identify data quality issues, ownership gaps, orphaned accounts and control weaknesses.

• Define reconciliation processes and validation approaches.

IAM Control State Analysis

• Analyse current IAM controls across:

o Joiner-Mover-Leaver (JML) processes

o Provisioning and deprovisioning

o Authentication and access management

o Privileged Access Management (PAM)

o Non-human identities

o Third-party identities

o Access governance and recertification

• Evaluate People, Process, Technology and Data aspects of IAM capability.

• Establish current-state IAM control baselines and identify improvement opportunities.

Application IAM Analysis

• Lead application IAM discovery activities across the application estate.

• Review application access models, authentication methods and ownership structures.

• Assess application integration with enterprise IAM capabilities.

• Classify applications into IAM baseline categories based on current control coverage, risk exposure and integration capability.

• Identify application-specific IAM risks and improvement opportunities.

Findings & Recommendations

• Develop evidence-based findings and observations.

• Prioritise risks, gaps and improvement opportunities.

• Produce practical recommendations aligned to business priorities and risk reduction objectives.

• Define quick wins, medium-term improvements and strategic considerations.

• Support the development of repeatable IAM baseline refresh processes.

Reporting & Deliverables

• Produce executive-level reports and stakeholder presentations.

• Develop IAM baseline reports, coverage and confidence metrics, and findings dashboards.

• Present recommendations and outcomes to business and technology leadership.

• Contribute to project governance, status reporting and customer sign-off activities.

Your Profile

Essential skills/knowledge/experience:

IAM Expertise

• Extensive experience in Identity and Access Management consulting and delivery.

• Strong understanding of:

o Joiner-Mover-Leaver processes

o Identity Governance and Administration (IGA)

o Access certification and recertification

o Role-Based Access Control (RBAC)

o Privileged Access Management (PAM)

o Authentication and Single Sign-On (SSO)

o Non-human identity management

o Third-party access management

Technical Knowledge

• Experience with one or more of:

o SailPoint

o Saviynt

o Microsoft Identity Manager (MIM)

o Microsoft Entra ID/Azure AD

o Active Directory

o CyberArk

o BeyondTrust

o Okta

o Ping Identity

• Understanding of identity lifecycle management and provisioning technologies.

• Knowledge of identity data models, reconciliations and integrations.

• Knowledge of writing scripts in either PowerShell, Python, SQL, Bash/Shell scripting languages

• Experience working with HRMS, ITSM and directory services platforms.

Analysis & Consulting Skills

• Strong data analysis and reconciliation capabilities.

• Ability to interpret complex IAM environments and identify control gaps.

• Experience producing management-level findings and recommendations.

• Ability to translate technical observations into business-focused outcomes.

• Strong problem-solving and root-cause analysis skills.

Stakeholder Management

• Excellent communication and facilitation skills.

• Experience working with senior business and technology stakeholders.

• Ability to lead workshops, interviews and discovery sessions.

• Strong documentation and presentation skills.

• Ability to influence decision-making without direct authority.

Project Delivery

• Experience leading IAM assessments, discovery engagements or transformation programmes.

• Ability to manage multiple workstreams and competing priorities.

• Experience working in regulated and enterprise-scale environments.

• Knowledge of programme governance, risk management and reporting practices.

Preferred Certifications

• CISSP/CISM/CRISC/SABSA/TOGAF

• Microsoft Identity and Access Administrator (SC-300)

• CyberArk Defender/Sentry

• SailPoint IdentityIQ or IdentityNow Certifications

• Saviynt Certifications

• ITIL Foundation