Senior IAM Architect

We are seeking a Senior IAM Architect with strong expertise in enterprise identity architecture, Microsoft Entra ID, Active Directory, and identity lifecycle management. The role will focus on designing scalable IAM solutions, modernizing identity provisioning processes, and integrating enterprise HR/SIS/ERP platforms within large-scale environments.

Roles and Responsibilities

• Design and implement enterprise IAM architecture and identity lifecycle solutions.
• Assess current provisioning environments and define modern target-state architecture.
• Design and optimize joiner, mover, leaver, rehire, and deprovisioning processes.
• Lead identity modernization initiatives, including on-prem Active Directory to Microsoft Entra ID migration.
• Architect identity integrations with HRIS, SIS, ERP, and downstream applications.
• Design automated provisioning workflows using PowerShell, SCIM, APIs, Microsoft Graph, SQL, and middleware tools.
• Establish identity governance controls, access models, reconciliation processes, monitoring, and error handling.
• Support complex identity scenarios including duplicate identities, multiple affiliations, and role changes.

Required Skills & Qualifications

• 8+ years of enterprise IAM experience with strong identity architecture and provisioning design expertise.
• Extensive experience with:
  • Microsoft Entra ID (Azure AD)
  • Active Directory
  • Entra Connect / Cloud Sync
  • Cross-tenant synchronization
• Hands-on experience with PowerShell automation and identity lifecycle management.
• Experience integrating IAM platforms with Workday, Banner, HRIS, SIS, or ERP systems.
• Experience supporting large enterprise environments (100K+ users, multi-domain environments).
• Strong understanding of:
  • SAML
  • OIDC/OAuth
  • SCIM
  • LDAP
  • Kerberos
• Experience designing role-based access, group-based access, access packages, and least-privilege models.

Preferred Exp

• Higher Education experience.
• Experience modernizing legacy IAM platforms, custom scripts, and manual provisioning processes.
• Experience with Identity Governance and Administration (IGA) solutions.