IAM Architect (onsite, remote option)

Vitaver & Associates, Inc; Fort Lauderdale (FL); Remote; USD 120,000 - 180,000; Full time

Job summary

Vitaver & Associates, Inc. in Fort Lauderdale, FL seeks an IAM Architect for a 12+ month onsite contract. You will lead enterprise IAM design, provisioning, and governance across Workday, Entra ID, AD, and downstream apps with a focus on least-privilege architecture.

Ideal candidates have 8+ years in IAM, strong knowledge of SAML/OIDC/SCIM, and extensive experience integrating HRIS/ERP systems. Relocation is required for this client-exclusive role.

Qualifications

• 8+ years in IAM architecture and user provisioning design.
• Experience modernizing legacy IAM environments and roadmaps.
• Hands-on provisioning with SCIM, APIs, Graph, PowerShell, SQL.
• Knowledge of Entra ID, AD, SSO protocols, and identity governance.
• Ability to relocate to Fort Lauderdale, FL for a 100% onsite role.

Responsibilities

• Assess current IAM environment and design a scalable target-state architecture.
• Design secure identity lifecycle processes across Workday, Banner, AD, Entra ID, and applications.
• Establish authoritative identity sources and ownership rules.
• Automate joiner/mover/leaver/deprovisioning, including complex scenarios.
• Implement monitoring, reconciliation, and deprovisioning safeguards.
• Develop a phased modernization roadmap that minimizes production impact.
• Drive IAM initiatives aligning with security and least-privilege practices.

Skills

IAM architecture

Identity lifecycle

Workday integration

SAML/OIDC

SCIM provisioning

APIs

PowerShell

SQL integration

Cross-tenant sync

Access governance

Tools

Microsoft Entra ID

Workday

Active Directory

OneLogin

Graph API

Job description

14820 – IAM Architect (Onsite) – Fort Lauderdale, FL

Start Date: ASAP
Type: Temporary Project
Estimated Duration: 12+ months with possible extensions
Work Setting: 100% of the time at the Client’s site. No telecommuting or remote work. This is a non-negotiable requirement from the client.
Our client is filling this contract position exclusively through approved staffing partners, so this opportunity is not available by applying directly with the client.

Required:

• Availability to work 100% of the time at the Client’s site in Fort Lauderdale, FL (required);
• Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years);
• Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings;
• Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities;
• Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources;
• Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;
• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;
• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures;
• Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;
• Experience with identity governance, including access reviews, privileged access, and service-account governance;
• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos;

Relocation Required: Candidates must have the ability to relocate.

Responsibilities include but are not limited to the following:

• Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture;
• Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;
• Establish authoritative identity sources and ownership rules for critical identity attributes;
• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations;
• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity;
• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;
• Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices;