IAM Architect

Apex Systems; Charlotte, Northern (NC, KY); Hybrid; USD 124,000 - 128,000; Part time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

ESPP

401K with match

HSA

EAP

Job summary

Apex Systems seeks an IAM Architect to design and implement enterprise IAM patterns across Charlotte, NC. The role focuses on modern authentication, conditional access, and secure access controls in collaboration with Cyber and Enterprise architecture teams.

Responsibilities include configuring Entra ID, migrating applications, and enabling step-up authentication and PAM. This is an onsite contract position in Charlotte, NC.

Qualifications

• Experience designing enterprise IAM architectures and authentication models.
• Ability to migrate federated apps and validate SAML/OIDC/OAuth flows.
• Strong knowledge of PAM and least-privilege administration.

Responsibilities

• Collaborate with cyber and enterprise architecture teams to design IAM patterns.
• Configure Entra ID tenants, trust, and application integrations.
• Implement Conditional Access with phishing-resistant MFA and risk controls.
• Support IAM program delivery across large-scale enterprise projects.

Skills

IAM architecture

Entra ID administration

Zero Trust design

FIDO2 / Passkeys / WHfB

Identity federation & migrations

Privileged access management

IAM program delivery

Tools

SailPoint

Saviynt

Entra ID Governance

Job description

# IAM ArchitectApply**Job#: 3046285****Job Description:**IAM Architect**Location:** Charlotte, North Carolina or Atlanta, Georgia (Onsite)Role OverviewWe are seeking a Cyber Security Architect to contribute to the design and implementation of our identity and access management (IAM) solutions. This role involves collaborating with various technology teams to develop and deploy secure, scalable IAM patterns. The position focuses on enhancing security through modern authentication methods and ensuring robust access controls across the enterprise.Key Responsibilities* Collaborate with Cyber and Enterprise architecture teams to select and develop appropriate IAM patterns and translate them into engineering designs.* Partner with subject matter experts across technology teams, including End User tech and Network services, on IAM design, configuration, and implementation.* Work with the Project Management team to identify and estimate technical tasks for program deliverables.* Configure Entra ID identity, trust settings, and entitlement management.* Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls.* Migrate federated applications and validate authentication flows.* Develop and support processes for procuring and managing FIDO2 keys and passkeys, and support Windows Hello for Business rollouts.* Enable step-up authentication for sensitive operations and secure privileged access paths.Required Qualifications**Education:** A Bachelor's Degree is not required for this position.**Technical Skills:*** Identity & Access Management (IAM) Architecture, including designing and implementing enterprise identity patterns and authentication models.* Microsoft Entra ID Administration & Engineering, including configuration of tenants, trust relationships, and application integrations.* Zero Trust & Conditional Access Design, with experience in implementing risk-based access controls and adaptive security measures.* Strong Authentication Technologies such as FIDO2, Passkeys, and Windows Hello for Business (WHfB).* Identity Federation & Application Migration, including the ability to migrate federated applications and validate SAML/OIDC/OAuth flows.* Privileged Access Management (PAM) & Secure Administration to secure privileged accounts and implement least-privilege models.* IAM Program Delivery & Cross-Functional Engineering to collaborate with various teams to deploy IAM solutions at an enterprise scale.Preferred Qualifications* Experience with Identity Governance & Administration (IGA) tools such as SailPoint, Saviynt, or Entra ID Governance.* Knowledge of Identity Threat Detection & Incident Response using solutions like Microsoft Defender XDR, Entra Identity Protection, or Sentinel.* Experience with Identity Governance Automation using PowerShell, Graph API, Logic Apps, or Terraform. *Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.**Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.apexsystems.com/privacy-policy**Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.**Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.**If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.**UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.***Employee Type:** Contract**Location:** Charlotte, NC, US**Job Type:****Date Posted:** August 13, 2026**Pay Range:** $90 - $93 per hour