Find your next role

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

• Active student of Computer Engineering, Systems Engineering, Software Engineering, Cybersecurity, or any IT related career.
• Understanding of Windows Server and Active Directory.
• Understanding of networking concepts.
• Basic understanding of cybersecurity concepts.
• English fluency is required for this role.

Your Role and Responsibilities

This internship offers an opportunity to learn how organizations use Identity Governance and Administration (IGA) to manage user identities and control access across their systems. IAM Interns will be introduced to core IAM and IGA concepts such as identity lifecycle management, account provisioning/deprovisioning, access request workflows, role‑based access control (RBAC), attribute‑based access control (ABAC), entitlement modeling, and access certification campaigns.

During the internship you will have guided exposure to leading IGA platforms like SailPoint and Saviynt, learning how these tools integrate with systems through connectors, APIs, and directories (such as Active Directory or Azure AD). As an intern you will also learn how identity data is collected, normalized, and analyzed within these tools to support governance tasks, policy enforcement, and automated workflows.

This role is designed for beginners who want to understand the technical foundations of identity systems, including how accounts, permissions, and roles are created, tracked, and governed in enterprise environments.

Responsibilities:

• Learn how identity lifecycle processes work, including how accounts are created, modified, and removed across different systems.

• Assist with gathering and organizing identity data (user attributes, entitlements, roles) to support onboarding activities in SailPoint or Saviynt.

• Observe and help document how access request workflows and approval processes are configured in IGA tools.

• Support the team in reviewing entitlements and roles, including basic role mining tasks such as identifying commonly assigned permissions.

• Help run or prepare for access certification campaigns by collecting data, reviewing access lists, and documenting findings.

• Learn how connectors and integrations work in IGA platforms, such as how SailPoint or Saviynt connect to Active Directory, HR systems, and applications.

• Participate in testing activities for IGA features—such as provisioning workflows, birthright access, and automated policy checks—under the guidance of IAM engineers.

• Assist with documenting system configurations, processes, and troubleshooting steps in a clear and organized way.

• Analyze basic identity or access data sets to identify inconsistencies (e.g., orphan accounts, over‑privileged users).

• Shadow IAM engineers during application onboarding, integration troubleshooting, and access governance discussions to gain hands‑on exposure.

• Collaborate with security and IT teams to understand how identity‑related issues are diagnosed and resolved.

• Active student of Computer Engineering, Systems Engineering, Software Engineering, Cybersecurity, or any IT related career.
• Strong understanding of general IT fundamentals on networking and infrastructure
• Strong understanding of Active Directory (AD) concepts and core Identity and Access Management (IAM) principles.
• Interest in learning Identity Governance and Administration (IGA) technologies such as SailPoint and Saviynt.
• Familiarity with technical concepts like databases, SQL queries, APIs, or cloud platforms (classroom‑level knowledge is acceptable).
• Strong understanding of cybersecurity concepts such as Just in time (JIT) access, Role Based Access (RBAC), Privileged Accounts etc.
• Strong analytical skills and attention to detail, especially when working with identity‑related data sets.
• Clear communication skills for documenting processes, findings, and creating documents with guidance from Senior Engineers.
• Willingness to learn new tools, technologies, and methodologies with guidance from the IAM team.
• Ability to work both independently on assigned tasks and collaboratively within the IAM team.
• English fluency is required for this role.

The following are preferred qualifications but are not required:

• Graduated from a technical high school with technical degree on Networking, Programming, systems administration or any other technical career.
• Relevant IT certifications such as Cisco Certified Support Technician (CCST), Cisco CCNA, CompTia A+ or Network+, Microsoft Azure Fundamentals (AZ-900), AWS Cloud Practitioner or others are preferred but not required.
• Understanding of Identity and Access Management technologies, processes and frameworks such as OpenID, OAuth, SAML is preferred but not required.
• Understanding of scripting languages such as PowerShell and Python.
• Familiarity with technical concepts like databases, SQL queries, APIs, or cloud platforms (classroom‑level knowledge is acceptable).
• Ability to read or write simple SQL queries to analyze identity or entitlement data, or willingness to learn.
• Understanding of Cloud Technologies and providers such as Microsoft Azure, Google Cloud or AWS.