IAM Solution Architect Madison, WI or Remote

Beacon Hill was founded to set a new standard in search, career placement and flexible staffing.

Position Type:
Contract Duration:
November 16, 2026 - May 14, 2027

Schedule:

Approximately 32-40 hours/week initially Work Arrangement:
Primarily remote with availability during U.S. Central Time business hours. Occasional onsite meetings in the Madison, Wisconsin area may be required.

We are seeking an experienced, hands‑on Senior IAM Solution Architect to provide architecture and technical leadership for a critical enterprise environment‑separation initiative. The role will focus on rapidly evaluating the existing IAM environment, identifying architectural and integration gaps, and developing practical, implementation‑ready solutions. The architect will work extensively across Microsoft Active Directory, Microsoft Entra , hybrid identity, application access, authentication, authorization, and identity security controls.

This is an execution‑focused technical architecture role, rather than a general IAM advisory, assessment‑only, or project management position.

• Assess current IAM architectures, integrations, configurations, dependencies, and future‑state access patterns.
• Identify architectural gaps, security risks, and technical constraints.
• Design practical current-state, transitional, and target‑state IAM solutions.
• Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross‑environment access.
• Produce implementation‑ready architecture and technical documentation.

• Analyze and troubleshoot AD and Entra .
• Design and validate security groups, nested groups, entitlement mappings, and group‑based application assignments.
• Evaluate hybrid identity synchronization and authentication flows.
• Address directory trusts and dependencies between separated environments.
• Troubleshoot authentication, authorization, identity integration, and group membership issues.

• Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel.
• Translate application and business access requirements into IAM solutions.
• Resolve identity issues involving users, applications, administrators, service accounts, and system integrations.
• Facilitate technical sessions to resolve migration blockers.

• Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.
• Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements.
• Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access.
• Develop controls to prevent inappropriate cross‑environment access.

• Identify identity‑related migration dependencies and sequencing requirements.
• Develop IAM migration guidance and integration specifications.
• Create cutover, access‑validation, and rollback procedures.
• Support mock go‑live exercises, troubleshooting, testing, and defect remediation.
• Support production cutover and post‑cutover stabilization.

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal‑level IAM engineering or solution architecture experience.
• Strong hands‑on expertise with Microsoft Active Directory and Microsoft Entra .
• Deep knowledge of:
  
  AD security groups and nested groups
  
  Identity synchronization
  
  Group‑based application access
  
  Authentication and authorization
  
  Hybrid identity architectures
  
  Experience with SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.
• Experience supporting complex…