IAM Architect (onsite, remote option

Information Technology / TelecommunicationsIAM Architect (onsite, remote option)

• Temp Project

14820

Estimated Duration: 12+ months with possible extensions
Work Setting: (100% of the time at the Client’s site. No telecommuting or remote work. This is a non-negotiable requirement from the client.)
Only candidates able to relocate as required should apply to avoid removal from future consideration.

Required:

• Availability to work 100% of the time at the Client’s site in Fort Lauderdale, FL (required);
• Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years);
• Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings;
• Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities;
• Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources;
• Experience with Microsoft Entra , Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;
• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, Power Shell, SQL, file-based integrations, and middleware;
• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands‑on troubleshooting of provisioning failures;
• Experience defining access‑assignment models using roles, groups, attributes, and access packages based on least‑privilege principles;
• Experience with identity governance, including access reviews, privileged access, and service‑account governance;
• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos;

Responsibilities include but are not limited to the following:

• Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture;
• Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra , One Login, and downstream applications;
• Establish authoritative identity sources and ownership rules for critical identity attributes;
• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations;
• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity;
• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;
• Guide implementation of IAM initiatives in alignment with modern security, governance, and least‑privilege practices;