Senior IAM Architect

Who We Are

Xtensys is a rapidly growing managed service provider delivering innovative technology solutions to health systems, beginning in New York and expanding nationwide. Owned by two industry leaders with a strong focus on advancing rural and community healthcare, Xtensys is executing several major initiatives and scaling quickly. With a team of more than 500 professionals, we are building a people-centered culture rooted in collaboration, innovation, and strategic thinking.

• Mission Driven Work:
  You are the "bridge" ensuring technology serves health systems and their patients when they need it most.
• Autonomy & Ownership:
  We trust you. You’ll lead projects, define success, and manage complexities with total support.
• A Culture of Innovation:
  Have a fresh perspective? We want it. We encourage risk taking and continuous improvement.
• Continuous Growth:
  We fuel your "restless curiosity" with opportunities to expand your skillset and mentor others.

Your Mission:
The Senior IAM Architect is a senior technical lead responsible for designing, documenting, and driving the maturation of identity and access management capabilities across the Xtensys environment and its customers. This is not a purely advisory role. The right candidate will own the current state, define the future state, and build the steppingstones between them, producing deliverables that are equally credible to a CISO and a systems administrator.

This role requires a high degree of independent judgment and self-direction. The IAM Architect is expected to proactively identify process gaps, access anomalies, governance risks, and operational inefficiencies without waiting to be directed. When something is wrong or could be improved, the expectation is that you investigate it, document your findings, and bring a recommendation, not just an observation. The IAM Manager should be learning about problems and proposed solutions together, not assigning discovery work.

The role operates across two horizons simultaneously. In the near term, the Architect will optimize existing tooling, including Manage Engine ADManager Plus, to reduce manual lifecycle work and improve governance controls while the organization evaluates a next-generation IGA platform (SailPoint Identity Now, pending budget approval). In the longer term, the Architect will lead the design and phased implementation of that platform, including Epic EMR provisioning, enterprise RBAC, and access certification programs.

This role may mentor or provide technical direction to junior IAM team members but does not carry formal supervisory responsibility at this time.

• Continuously monitor identity systems, access patterns, lifecycle workflows, and audit logs for anomalies, policy violations, and process gaps without waiting for issues to be escalated.
• Independently investigate anomalies, document root cause findings, and implement or recommend corrective actions with minimal direction.
• Establish and maintain proactive monitoring practices including stale account detection, orphaned access identification, offboarding compliance tracking, and privilege creep analysis.
• Maintain a standing risk and improvement register for the IAM program, self updating it as new findings are identified and tracking items through resolution.

• Assess, document, and baseline all primary IAM workflows including Joiner, Mover, Leaver, Leave of Absence, and Reactivation processes across all Xtensysmanaged domains.
• Identify and document manual process steps, tooling gaps, compliance exposure, and quality control risks in existing workflows.
• Maintain living documentation of the IAM…