IAM Architect (Onsite, remote option) – Fort Lauderdale, FL

Vitaver and Associates, Inc. (dba Vitaver Staffing); Fort Lauderdale (FL); Hybrid; USD 120,000 - 180,000; Part time

Job summary

Vitaver and Associates, Inc. (dba Vitaver Staffing) is seeking an experienced IAM Architect for a 12+ month project. Remote work possible for local SOUTH FLORIDA candidates with occasional onsite meetings. Lead modernization of IAM with enterprise integrations and governance.

Responsibilities include designing scalable identity architectures, automating lifecycle processes across Workday, Banner, AD, and Entra ID, and establishing authoritative identity sources with least-privilege controls.

Qualifications

• 8+ years in IAM architecture and provisioning design.
• Experience modernizing legacy IAM to target-state architecture.
• End-to-end identity lifecycle management experience.

Responsibilities

• Assess current IAM env and design a scalable target-state architecture.
• Design secure identity lifecycles across Workday, Banner, AD, Entra ID, OneLogin.
• Establish authoritative identity sources and ownership rules.
• Automate joiner, mover, leaver, rehire and deprovisioning processes.
• Implement monitoring, reconciliation, error handling, safeguards.
• Develop a phased modernization roadmap that minimizes production impact.
• Guide IAM initiatives with security, governance and least-privilege practices.

Skills

IAM architecture

Lifecycle management

HRIS integration

Entra ID / AD

SCIM provisioning

Provisioning governance

SAML / OIDC

Identity governance

Tools

Workday

Banner

Active Directory

Microsoft Entra ID

OneLogin

Job description

Start Date: ASAP

Type: Temporary Project

Estimated Duration: 12+ months with possible extensions

Work Setting: Open to remote for local to SOUTH FLORIDA candidates with occasional onsite meetings.

Required:

• Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years);


• Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings;


• Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities;


• Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources;


• Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;


• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;


• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures;


• Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;


• Experience with identity governance, including access reviews, privileged access, and service-account governance;


• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos;

Responsibilities include but are not limited to the following:

• Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture;


• Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;


• Establish authoritative identity sources and ownership rules for critical identity attributes;


• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations;


• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity;


• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;


• Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices;