Solution Architect, Identity and Access Management

DUIT • Halethorpe, MD

5d • $100,000 - $150,000

About The Position

DUIT is building a team to modernize identity management for a large public university. The Solution Architect will own the end-to-end target architecture, including how identities originate in Workday, flow through Microsoft Entra ID and Active Directory to third-party applications, and move provisioning away from legacy PeopleSoft identity flags. The role will turn assessment findings into a future-state design and migration plan. The position is contingent on contract award, with an anticipated start in February 2027.

Davis Unlimited Information Technologies (DUIT) is a Baltimore-based AI and cybersecurity firm founded in 2010. It supports mission-critical government and critical-infrastructure environments, including the Department of Defense and federal civilian agencies. DUIT describes its culture as mission-driven and values service, integrity, and national security. It is a federally certified woman-owned and minority-owned small business and an equal opportunity employer.

Requirements

• At least 8 years of identity and access management experience, including at least 4 years as an architect designing identity solutions for large enterprises.
• Hands-on design experience with HR-driven provisioning from Workday or a comparable HR system into Entra ID and Active Directory, including attribute mapping and source-of-truth design.
• Deep knowledge of Microsoft Entra ID and Active Directory, including hybrid synchronization (Entra Connect or Cloud Sync), enterprise applications, and application provisioning.
• Working knowledge of SAML, OpenID Connect, OAuth 2.0, and SCIM.
• Experience leading migration from a legacy identity source or provisioning system, including dependency mapping, sequencing, testing, and rollback planning.
• Strong writing and facilitation skills, with the ability to explain architecture trade-offs to non-technical owners.

Nice To Haves

• Identity experience in higher education, including multiple affiliations such as students, faculty, adjuncts, and alumni.
• Experience with PeopleSoft identity configurations.
• Familiarity with FERPA and the eduPerson schema.
• Certifications such as Microsoft SC-100 or SC-300, a Workday integration certification, TOGAF, CISSP, or CIDPRO.
• Experience aligning identity architecture to NIST CSF 2.0 or NIST SP 800-53.

Responsibilities

• Assess the current identity architecture across Workday, Entra ID, and Active Directory, and design a centralized, scalable future-state architecture with Workday as the originating identity provider.
• Define authoritative sources, attribute ownership, and attribute mappings, including organization codes, so identity data supports governance, provisioning, and role-based access control (RBAC).
• Design Workday-driven inbound provisioning to Entra ID and Active Directory, including synchronization, writeback, and just-in-time provisioning.
• Trace PeopleSoft identity-flag and persona dependencies across applications, integrations, and scripts, and architect the decoupling, migration sequencing, testing, and rollback approach.
• Define standard integration patterns for single sign-on (SSO), SCIM provisioning, deprovisioning, and role assignment across third-party applications, as well as interim patterns for applications that cannot yet integrate.
• Produce architecture diagrams, decision records, and roadmaps for business and technical stakeholders, and present clear, accessible deliverables in workshops.

Benefits

• Competitive salaries
• Health, dental, vision, and other insurance benefits
• 401(k) plans
• 11 paid company holidays and PTO tiers
• Educational reimbursement programs
• Employee recognition and other incentives
• Opportunities for advancement

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed