IAM Architect (onsite)

Vitaver and Associates • Fort Lauderdale, FL

2d • Onsite

About The Position

The IAM Architect will assess the existing identity and access management environment and design a modern, scalable target-state architecture. The role will define secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications, and establish authoritative identity sources and ownership rules for critical identity attributes.

The position will automate and safeguard joiner, mover, leaver, rehire, and deprovisioning processes, including complex scenarios such as employee/student dual affiliations. It will also implement monitoring, reconciliation, error handling, and other controls to maintain identity data integrity; develop a prioritized, phased modernization roadmap that avoids production disruption; and guide IAM initiatives in alignment with modern security, governance, and least-privilege practices.

This is a temporary project estimated to last 12+ months, with possible extensions. It requires working onsite at the client’s Fort Lauderdale, Florida site 100% of the time; remote work and telecommuting are not permitted. Candidates must be able to relocate as required. The client is filling the role exclusively through approved staffing partners, so applicants cannot apply directly to the client.

Requirements

• At least 8 years of experience with enterprise identity and access management architecture and user-provisioning design.
• Experience assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings.
• Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities.
• Experience integrating HRIS, SIS, and ERP platforms (such as Workday and Banner) with identity management systems and establishing authoritative identity sources.
• Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization.
• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware.
• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, and alerts for failed provisioning or stale accounts; hands-on troubleshooting of provisioning failures.
• Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles.
• Experience with identity governance, including access reviews, privileged access, and service-account governance.
• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos.
• Availability to work onsite at the client’s Fort Lauderdale, Florida site 100% of the time; candidates must be able to relocate as required.

Responsibilities

• Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture.
• Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications.
• Establish authoritative identity sources and ownership rules for critical identity attributes.
• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including complex employee/student dual-affiliation scenarios.
• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity.
• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production.
• Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed