Senior Identity Access Management; IAM) Solution Architect

Beacon Technologies is seeking a highly experienced, hands‑on Senior Identity and Access Management (IAM) Solution Architect to provide immediate technical expertise and architectural support for a critical enterprise environment‑separation initiative. This initiative involves separating approximately 30% of the organization’s infrastructure and personnel into distinct operating environments, including the migration and realignment of supporting applications, systems, data, and identity services. Application transitions are expected to be primarily on‑premises‑to‑on‑premises and cloud‑to‑cloud, with limited exceptions.

The selected individual must be capable of rapidly understanding the existing technical environment, evaluating current IAM architectures and assumptions, identifying gaps, and developing practical, implementation‑ready solutions. This position requires substantial interaction with application owners, infrastructure teams, cloud engineering, cybersecurity personnel, and business stakeholders. This is an execution‑focused technical architecture position, not a general IAM advisory, assessment‑only, or project management role. The objective is not to redesign the organization’s overall IAM strategy, implement a new enterprise role‑based access control (RBAC) model, or undertake other extensive IAM transformation activities.

The immediate priority is identifying and implementing targeted, achievable solutions that support the established project timeline while maintaining appropriate security controls.

• IAM Architecture Assessment and Solution Design
• Rapidly assess existing IAM architecture, configurations, technical documentation, design assumptions, integration dependencies, and proposed future‑state access patterns.
• Identify architectural gaps, technical constraints, integration issues, and security risks that may impede successful environment separation.
• Develop detailed, implementation‑ready technical solutions and architectural designs that address identified IAM challenges.
• Evaluate identity trust boundaries, authentication mechanisms, directory dependencies, authorization models, and cross‑environment access requirements.
• Recommend practical remediation strategies that balance security, operational continuity, technical feasibility, and project deadlines.
• Document current‑state, target‑state, and transitional IAM architecture, including technical diagrams, dependencies, and implementation considerations.
• Active Directory and Microsoft Entra n
• Analyze and troubleshoot Microsoft Active Directory (AD) and Microsoft Entra  and group configurations.
• Design and validate security group structures, nested group memberships, group‑based application assignments, and entitlement mappings.
• Evaluate hybrid identity synchronization, authentication flows, directory trust relationships, and access dependencies across separated environments.
• Develop practical solutions for maintaining authorized application and system access during migration.
• Identify and resolve authentication, authorization, group membership, and identity integration issues arising from environment separation.
• Establish appropriate group mappings, access validation methods, and rollback approaches for affected migration activities.
• Business and Application Integration Support
• Work directly with business stakeholders, application owners, and technical teams to understand access requirements and operational dependencies.
• Translate business access requirements into actionable IAM technical solutions.
• Resolve complex IAM‑related issues affecting applications, users, administrators, service accounts, and system integrations.
• Identify necessary identity and access patterns for systems transitioning between…