{"id":3161155,"url":"https://alion.io/job/ahead-principal-technical-consultant-security","title":"Principal Technical Consultant, Security","company":{"id":3614,"name":"AHEAD","domain":"ahead.com","url":"https://alion.io/company/ahead","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":75,"open_postings":38,"ghost_share":0,"stale_share":0.816,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Solutions","role_family":"Solutions","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":55000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-23T11:51:29Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-11-03T19:16:55Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"The Principal Technical Consultant (PTC) Identity Focused Security Architect is a hands-on delivery leader who designs and leads identity solution implementations in client environments. You will own identity workstreams end to end, driving architecture, implementation planning, execution oversight, and stakeholder alignment, primarily across Microsoft identity (Active Directory and Entra ID), IGA, and modern authentication patterns (SSO, MFA, password less). Experience with other IAM platforms (e.g., Okta) and PAM (e.g., Delinea, CyberArk) experience is a plus.\nCore Responsibilities\nIdentity architecture and implementation leadership:\nLead identity workstreams from discovery and current state analysis through target state architecture, implementation planning, delivery oversight, and closeout. \nDesign and deliver Microsoft identity solutions with a deep focus on Active Directory and Microsoft Entra ID, including hybrid identity patterns where applicable. \nDrive the technical approach for modern authentication and federation capabilities, including SSO, MFA, and password less. \nIdentity Governance and Administration (IGA) delivery:\nLead and or execute IGA-focused deliverables such as:\nJoiner mover-leaver lifecycle processes \nProvisioning and deprovisioning patterns \nAccess request workflows where applicable \nRole and policy model improvement to reduce risk and increase operational clarity \nAccess control model design:\nApply and communicate access control methodologies, including RBAC, ABAC, and PBAC, translating business requirements into implementable identity and authorization designs. \nClient-facing consulting and execution:\nOwn day-to-day technical leadership with clients: requirements sessions, whiteboarding, design reviews, implementation coordination, and executive-ready communication. \nCoordinate delivery across client stakeholders (engineering teams through senior security leaders) to align on priorities, sequencing, and execution plans. \nProduce clear, high-quality deliverables (architecture diagrams, implementation plans, runbooks, and decision documentation).\nRequired Qualifications\nStrong Microsoft identity architecture and implementation experience, especially Active Directory and Entra ID. \nHands-on IGA knowledge and delivery experience in real client environments. \nStrong understanding of access control methodologies: RBAC, ABAC, PBAC. \nStrong authentication expertise: SSO, MFA, password less, with design and implementation level understanding. \nDemonstrated ability to lead implementation, not just advise; planning, execution oversight, and delivery ownership. \nProven client-facing consulting capability: stakeholder management, clear communication, and whiteboard-ready technical leadership.\nPlus scope responsibilities (nice to haves)\nSupport implementations or integrations with other IAM platforms (Okta or comparable solutions). \nContribute to or support PAM initiatives (Privileged Access Management), such as privileged access workflows, vaulting patterns, and privileged lifecycle controls, when in scope. \nPreferred Qualifications\nExperience implementing or supporting EntraID, Okta, or similar IAM platforms. \nPAM experience (Privileged Access Management). \nScripting or automation exposure (PowerShell, Python) to support identity integrations and operationalization. \nExperience working in large, complex environments developing global strategies for successful implementation delivery. \nWhat success looks like\nClients receive identity architectures that are implementable, not theoretical, backed by an execution plan, and delivered outcomes. \nIdentity workstreams are delivered smoothly with strong coordination, clear documentation, and stakeholder alignment. \nAuthentication and governance controls measurably improve security posture while supporting business usability.","description_format":"text","description_chars":3851,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Managed IT Services (MSP)","AI Consulting & Integration","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-23T16:11:37Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":10,"expected_fill_days":74,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/ahead-principal-technical-consultant-security","json_url":"https://alion.io/job/ahead-principal-technical-consultant-security.json","meta":{"generated_at":"2026-11-03T19:55:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2571,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3614},"rest":"https://alion.io/mcp/rest/get_company?id=3614"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fahead-principal-technical-consultant-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fahead-principal-technical-consultant-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fahead-principal-technical-consultant-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ahead-principal-technical-consultant-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fahead-principal-technical-consultant-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3161155}},{"tool":"search_jobs","arguments":{"company":"ahead.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3161155},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}