Access Governance SME

Title: Access Governance SME
Location: Remote (U.S. Only)
Duration: 8-Week Assessment Project
Pay Rate: Up to $85/hour

Overview
Experis is seeking an experienced Access Governance SME to support a Microsoft 365 governance, access risk, and Copilot readiness assessment for a large insurance organization. This role will lead the identity governance workstream, evaluating how access is granted across the Microsoft 365 environment and identifying risks related to oversharing, guest access, group sprawl, and ineffective identity lifecycle controls.
The ideal candidate has deep expertise in Microsoft Entra ID (Azure AD), identity governance, Microsoft Graph, and access management practices within complex enterprise environments. This individual will help determine how effective access is established, how it has drifted from intended policy, and how those conditions may impact Microsoft 365 Copilot exposure and organizational risk.

Key Responsibilities

• Assess Microsoft Entra ID governance practices, including group ownership, guest lifecycle management, access reviews, privileged access, and joiner/mover/leaver processes.
• Perform identity reconciliation activities between Entra ID and authoritative workforce systems to identify stale, orphaned, and non-human accounts.
• Analyze direct and nested group memberships to determine effective access across the Microsoft 365 environment.
• Evaluate guest and external user access, including dormant accounts, standing access to sensitive resources, and B2B collaboration risks.
• Identify ownerless, stale, and over-permissioned groups and assess their impact on content exposure and governance risk.
• Develop identity governance findings that clearly connect access management issues to Microsoft 365 Copilot exposure risks.
• Support governance assessments by producing evidence-based analysis, risk findings, and remediation recommendations.
• Collaborate with technical and business stakeholders, including identity administrators, governance teams, and information security leaders.
• Contribute to risk assessments, heat maps, and remediation roadmaps related to identity governance and access management.

• 5+ years of experience in Microsoft Entra ID (Azure AD) identity governance and access management.
• Strong expertise in access reviews, entitlement management, guest/B2B access governance, Privileged Identity Management (PIM), and identity lifecycle processes.
• Experience reconciling identity data against HRIS or other authoritative systems within large enterprise environments.
• Hands-on experience using Microsoft Graph and PowerShell to collect, analyze, and report on identity and access data at scale.
• Strong understanding of nested groups, transitive membership, and effective access analysis.
• Knowledge of how Microsoft Entra ID permissions, group memberships, and sharing configurations influence Microsoft 365 Copilot access and content exposure.
• Ability to develop clear, defensible findings and recommendations supported by data and evidence.
• Strong analytical, problem-solving, and stakeholder communication skills.

• Experience supporting governance, security, or compliance initiatives within insurance, financial services, or other highly regulated industries.
• Experience operating in global or multi-jurisdiction environments with regulatory and data residency considerations.
• Familiarity with Entra ID Access Reviews, Entitlement Management, and identity governance remediation practices.
• Understanding of SharePoint Online and Microsoft Teams permission models, including Microsoft 365 Groups and security groups.
• Relevant Microsoft certifications, such as Microsoft Certified: Identity and Access Administrator Associate or related Microsoft security and identity credentials.