Senior Identity and Access Management Architect

Job Summary: Sr. Identity and Access Management (IAM) Architect

- Lead the design and implementation of enterprise-wide Identity and Access Management (IAM) architecture and solutions.
- Assess existing IAM environments and develop modern, scalable target-state architectures for user provisioning.
- Manage end-to-end user provisioning processes across HR/SIS systems, identity platforms, directories, and applications.
- Design and implement joiner, mover, leaver, rehire, return, and deprovisioning processes.
- Address complex identity scenarios such as dual affiliations, duplicate identities, and multiple source records.
- Establish authoritative identity sources and ownership rules for critical user attributes.
- Integrate HRIS/SIS/ERP platforms (e.g., Workday, Banner) with IAM systems.
- Provide expert-level administration and integration of Microsoft Entra ID, Azure AD, Active Directory, Entra Connect, and Cloud Sync.
- Lead on-premises Active Directory to Microsoft Cloud migration projects.
- Design and automate provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file integrations, and middleware.
- Implement provisioning safeguards, including reconciliation, validation, approval gates, error handling, and rollback mechanisms.
- Develop monitoring and alerting for provisioning failures, synchronization issues, duplicate IDs, and incomplete lifecycle events.
- Define and modernize access-assignment models using roles, groups, attributes, access packages, and least-privilege principles.
- Ensure strong understanding and separation of authentication, provisioning, authorization, and identity governance functions.
- Apply advanced knowledge of SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos protocols.
- Modernize legacy IAM platforms, scripts, databases, and manual workflows.
- Preferably bring experience from large enterprise or higher education environments (100,000+ users, multi-domain).
- Collaborate with stakeholders to ensure secure, efficient, and compliant IAM solutions.

Location: Remote/Onsite (EST timezone, preference for Florida-based candidates)
Duration: 12+ months