Senior Enterprise IAM Architect - Workday-Driven Identity

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity management for a large public university. You will own the end-to-end target architecture:

• how identities originate in Workday;

• how they flow through Microsoft Entra  Active Directory to third-party applications;

• how provisioning moves off legacy People Soft identity flags.

You will turn assessment findings into a future-state design and a migration plan.

Position is contingent on contract award. Anticipated start:
February 2027

Why work for us?

• No red tape!
• Competitive salaries
• Great Health/Dental/Vision/Other Insurance Benefits
• Excellent 401K plans
• 11 Paid Company Holidays & PTO Tiers
• Educational Reimbursement Programs
• Limitless environment where you matter
• Recognition of outstanding work and other employee incentives
• Opportunities for advancement

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI andcybersecurityfirm working at the cutting edge ofpost-quantum cryptography, AI development, and federalcybersecuritycompliance. Founded in 2010, DUIT supports mission-critical government and critical infrastructure environments — including DoD, and federal civilian agencies. Our leadership team includes a U.S. military veteran with active security clearances, and we proudly support a mission-driven culture that values service, integrity, and national security.

We are a federally certified woman-owned and minority-owned small business, giving our team the opportunity to work on high-impact federal contracts and emerging technologies that directly impact national security."Securing the Future through AI and Quantum-Resilient Innovation."

We have opportunities for advancement, and our salaries and benefits are competitive. We are an equal opportunity employer; check us out on the web at https://(Use the "Apply for this Job" box below). You can follow us on Linked In, X, and Facebook. We do things differently, contact us to find out how...Together, we can DUIT!

What you will do

• Assess the current identity architecture across Workday, Entra , and Active Directory, and design a centralized, scalable future-state architecture with Workday as the originating identity provider.

• Define authoritative sources, attribute ownership, and attribute mappings, including organization codes, so identity data supports governance, provisioning, and RBAC.

• Design Workday-driven inbound provisioning to Entra  Active Directory, including synchronization, writeback, and just-in-time provisioning.

• Trace People Soft identity flag and persona dependencies across applications, integrations, and scripts, and architect the decoupling, migration sequencing, testing, and rollback approach.

• Define standard integration patterns for SSO, SCIM provisioning, deprovisioning, and role assignment across third-party applications, plus interim patterns for applications that can’t integrate yet.

• Produce architecture diagrams, decision records, and roadmaps that business and technical stakeholders can act on, and present them in workshops as clear, accessible deliverables.

What you bring

• 8+ years in identity and access management, including at least 4 years as an architect designing identity solutions for large enterprises.

• Hands-on design of HR-driven provisioning from Workday (or a comparable HR system) into Entra  Active Directory, including attribute mapping and source-of-truth design.

• Deep knowledge of Microsoft Entra  Active Directory: hybrid sync (Entra Connect or Cloud Sync), enterprise applications, and app provisioning. Working knowledge of SAML, OpenID Connect, OAuth 2.0, and SCIM.

• Experience leading a migration off a legacy identity source or provisioning system, including dependency mapping, sequencing, testing, and rollback planning.

• Strong writing and facilitation skills; able to explain architecture trade-offs to non-technical owners.

Preferred

• Identity work in higher education (multiple affiliations, students, faculty, adjuncts, alumni), People Soft identity configurations, and familiarity with FERPA and the edu Person schema.

• Certifications such as Microsoft SC-100 or SC-300, a Workday integration certification, TOGAF, CISSP, or CIDPRO.

• Experience aligning identity architecture to NIST CSF 2.0 or NIST SP 800-53.