Senior IGA Consultant, Identity Governance and Access Controls

Intelance is building a trusted associate team for identity governance and access control work in regulated and complex organisations. We are looking for a Senior IGA Consultant to turn access evidence into clear findings, practical access rules and delivery ready actions. The first likely assignment supports a financial services client reviewing who can see and change sensitive client information across Microsoft, data and business platforms. This is an associate contract. Work is assigned through paid work orders after client approval. The first assignment is expected to be a focused number of delivery days, with the possibility of later pilot, access review and recurring governance work. Working with the Engagement Director and Principal IAM Consultant, you will: Analyse user, group, role, permission and service account exports. Reconcile technical access with the business reason for access. Identify broad, stale, direct and conflicting access, and record the evidence for each point. Carry out role mining and draft role and access matrices. Test joiner, role change and leaver controls, including where old access is removed. Draft clear findings that state the system, affected access, evidence, risk and required decision. Support access reviews and certification so business owners can make informed decisions. Review privileged accounts, service accounts and integration identities. Support access testing for Microsoft Entra ID, Active Directory, Microsoft 365, SharePoint and connected business systems. Maintain the findings register, evidence record and implementation backlog. Support pilot testing and confirm that completed changes match the approved design. You will not be expected to act as the overall design authority. The Principal IAM Consultant owns the target access design and final technical challenge. Essential: Strong recent experience delivering identity governance or access control work in a complex organisation. Hands on experience analysing users, groups, roles, permissions and access grants. Practical role mining and role based access control experience. Experience designing or operating access reviews, certification and recertification. Experience testing joiner, role change and leaver controls. Good working knowledge of Microsoft Entra ID and Active Directory. Working knowledge of Microsoft 365 and SharePoint permissions. Experience reviewing privileged accounts, service accounts or integration access. Able to write short, evidence based findings in plain English. Comfortable working independently from source records and recorded interviews. Based in the United Kingdom and available during UK business hours. Available for short, clearly scoped assignments that may grow after client approval. Strong advantage: Experience in financial services, investment management or another regulated business. Experience with Snowflake or another cloud data platform. Experience with SailPoint, Saviynt or another identity governance platform. Experience of segregation of duties analysis. Experience reviewing AI tools or connectors that can reach company information. Relevant Microsoft identity, SailPoint, Saviynt, CISSP, CISM or ISO 27001 certification. Please apply only if you have personally analysed access evidence and turned it into findings or role design. General project coordination or user administration alone is not enough. Indicative rate of £425 to £500 per day, depending on the assignment and depth of relevant experience. Fully remote work within the United Kingdom. Clear work orders, agreed days and defined outputs before each assignment starts. Direct access to the Engagement Director and Principal IAM Consultant. Focused work on real access problems in regulated organisations. Potential follow on work across design, pilot delivery, access reviews and recurring governance. Prompt payment against agreed timesheets and completed work. Please submit your CV and answer the application questions fully. We will first check whether your recent work matches the evidence analysis and role design needed. Suitable candidates will then have a short screening call and a structured technical discussion based on a real access scenario.