Cloud IAM Solutions Architect

Public Consulting Group • Boston, MA

36d • $160,000 - $180,000 • Remote

About The Position

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm is a member of a family of companies with experience in all 50 states, and clients in three Canadian provinces and Europe. PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit www.publicconsultinggroup.com. Duties & Responsibilities Architect Next-Gen IAM Solutions: Design secure, scalable architecture across the IAM landscape, including CIAM, IGA, PAM, MFA, SSO, federation, and identity lifecycle governance. Implement Cutting-Edge Tech: Leverage tools like Azure AD, BeyondTrust, Okta, Ping Identity, ForgeRock, and AWS IAM to deliver best-in-class access experiences. Shape Governance & Policy: Define and implement RBAC, ABAC, and authentication protocols like SAML, OAuth, OpenID Connect, aligned with NIST and ISO 27001 frameworks. Optimize Identity Infrastructure: Manage and fine-tune Azure AD, Active Directory, DNS, Kerberos, NTLM, PKI, GPOs, Certificate Authorities, and more. Drive Seamless Integration: Ensure smooth, secure integration of IAM solutions across enterprise apps, cloud platforms, and third-party services. Lead with Security First: Proactively identify and mitigate identity-related risks, focusing on privileged access management and identity lifecycle controls. Own the Full Lifecycle: From initial discovery through execution and post-deployment, you’ll lead IAM architecture on complex, high-impact client programs. Be a Strategic Partner: Work with stakeholders to turn complex identity requirements into clear, compliant, scalable solutions that align with business goals. Ensure Delivery Excellence: Oversee solution quality and architectural governance, lead troubleshooting and incident resolution, and ensure delivery meets or exceeds client expectations. Support Business Growth: Play a key role in proposals, solution design, level-of-effort estimation, and executive presentations. Team Player: all other duties assigned. The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities or skills of personnel so classified.

Requirements

• Deep expertise in Microsoft identity platforms: Active Directory, Azure AD, Conditional Access, Office 365 Roles, Intune, and Service Principals.
• Strong grasp of modern identity protocols and federation standards: OAuth2, OIDC, SAML, ADFS, Okta, Ping Identity.
• Skilled in directory integrations, cloud federation, and enterprise-scale identity management.
• A solid understanding of certificate services, such as PKI, CA, and AD CS, and how they underpin secure authentication.
• Knowledgeable in compliance frameworks: HIPAA, SOC1/2, HITRUST, NIST.
• Strong foundation in systems automation, change management, capacity planning, and documentation best practices.
• Natural leader who can motivate teams, manage multiple priorities, and drive results across complex environments.
• Extensive experience in designing, managing, and migrating secure, multi-domain on-premises Windows Active Directory environments—including Forest, Schema, Global Catalog, GPO, OU, Security Groups, and Service Account administration—with hybrid cloud integration and advanced identity governance.
• Education: Bachelor’s degree in computer science, Information Systems, Software Engineering, or a related technical field.
• Experience: 10+ years of hands-on experience in systems administration (Windows/Linux), networking, and cybersecurity within complex enterprise environments.
• 5+ years in client-facing roles delivering enterprise IAM solutions—including architecture, implementation, and integration across hybrid or multi-cloud ecosystems.

Nice To Haves

• An advanced degree is a plus.
• Preferred: CIAM, CAMS, CIMP, CIGE, Microsoft Azure, and AWS certifications.
• Bonus: Industry-recognized certifications such as CISSP, CISA, and CIGA.
• ITIL certification is a plus, especially for candidates with a strong service delivery orientation.

Responsibilities

• Architect Next-Gen IAM Solutions: Design secure, scalable architecture across the IAM landscape, including CIAM, IGA, PAM, MFA, SSO, federation, and identity lifecycle governance.
• Implement Cutting-Edge Tech: Leverage tools like Azure AD, BeyondTrust, Okta, Ping Identity, ForgeRock, and AWS IAM to deliver best-in-class access experiences.
• Shape Governance & Policy: Define and implement RBAC, ABAC, and authentication protocols like SAML, OAuth, OpenID Connect, aligned with NIST and ISO 27001 frameworks.
• Optimize Identity Infrastructure: Manage and fine-tune Azure AD, Active Directory, DNS, Kerberos, NTLM, PKI, GPOs, Certificate Authorities, and more.
• Drive Seamless Integration: Ensure smooth, secure integration of IAM solutions across enterprise apps, cloud platforms, and third-party services.
• Lead with Security First: Proactively identify and mitigate identity-related risks, focusing on privileged access management and identity lifecycle controls.
• Own the Full Lifecycle: From initial discovery through execution and post-deployment, you’ll lead IAM architecture on complex, high-impact client programs.
• Be a Strategic Partner: Work with stakeholders to turn complex identity requirements into clear, compliant, scalable solutions that align with business goals.
• Ensure Delivery Excellence: Oversee solution quality and architectural governance, lead troubleshooting and incident resolution, and ensure delivery meets or exceeds client expectations.
• Support Business Growth: Play a key role in proposals, solution design, level-of-effort estimation, and executive presentations.
• Team Player: all other duties assigned.

Benefits

• PCG provides a range of benefits for this role, including medical and dental care benefits, 401k, PTO, parental leave, bereavement leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees