14820 – IAM Architect (Onsite, remote option) – Fort Lauderdale, FL
Start Date: ASAP
Type: Temporary Project
Estimated Duration: 12+ months with possible extensions
Work Setting: Open to remote for local candidates with occasional onsite meetings.
Our client is filling this contract position exclusively through approved staffing partners, so this opportunity is not available by applying directly with the client. If you're interested, we'd be happy to represent you throughout the hiring process.
Required:
• Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years);
• Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings;
• Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities;
• Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources;
• Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;
• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;
• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures;
• Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;
• Experience with identity governance, including access reviews, privileged access, and service-account governance;
• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos;
Responsibilities include but are not limited to the following:
• Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture;
• Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;
• Establish authoritative identity sources and ownership rules for critical identity attributes;
• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations;
• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity;
• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;
• Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices;