IAM (Sailpoint) Architect (REMOTE)

Conexess Group; Livonia (MI); On-site; USD 90,000 - 130,000; Full time

Job summary

Conexess Group is seeking an experienced candidate with deep hands-on expertise in Enterprise Identity and Access Management (IAM) specifically within regulated industries like healthcare and financial services. This role emphasizes operational excellence and solution architecture across complex multi-system environments, including responsibilities such as access request fulfillment and automated workflow design. Ideal candidates will have strong troubleshooting skills and experience with various IAM tools and platforms.

Qualifications

• Deep, hands-on experience in Enterprise IAM.
• Experience in regulated industries such as healthcare or financial services.
• Strong troubleshooting skills across identity and authentication technologies.

Responsibilities

• Intake, evaluation, approval, and fulfillment of access requests via ServiceNow.
• Design and implementation of automated provisioning workflows.
• Eliciting and documenting business and technical requirements.

Skills

Enterprise Identity and Access Management (IAM)

SAML

OAuth

Kerberos/KDC

Linux administration

Windows Server administration

AWS infrastructure setup

PowerShell

JavaScript

Tools

Microsoft Active Directory

IdentityIQ

ServiceNow

SQL databases

Job description

Overview

We are requesting candidates with deep, hands-on experience in Enterprise Identity and Access Management (IAM), ideally within regulated industries such as healthcare, financial services, or insurance. The ideal candidate will demonstrate both operational excellence and solution‑architecture experience across complex, multi‑system environments.

Responsibilities

• Enterprise IAM Operations & Engineering
  • Intake, evaluation, approval, and fulfillment of access requests (e.g., via ServiceNow)
  • High‑volume request processing with strong SLA adherence
  • Interaction with stakeholders ranging from frontline staff to executive leadership
• Identity Management Platforms & Directory Services
  • Microsoft Active Directory (on‑prem and Azure AD)
  • Exchange / Office 365
  • Identity Governance tools (e.g., IdentityIQ or equivalent)
  • LDAP‑based directories (openLDAP, NetIQ/Micro Focus eDirectory)
• Provisioning & Integration
  • Design and implementation of automated provisioning/deprovisioning workflows
  • Integration with downstream systems such as:
    • AD, Exchange/O365, SQL databases
    • Web services (SOAP / REST APIs)
    • PowerShell, JavaScript, and scripting‑based integrations
• Single Sign-On & Authentication
  • SAML, OAuth, Kerberos/KDC
  • Multi‑Factor / Two‑Factor Authentication
  • Standards‑based identity and federation implementations

Engineering, Infrastructure & Platform Skills

• Linux (CentOS/SUSE) administration, including patching and upgrades
• Windows Server administration
• AWS infrastructure setup for IAM backend systems, including security group configuration
• Monitoring, troubleshooting, and optimization of identity workflows and scheduled jobs
• Experience supporting environments ranging from 1,000 to 100,000+ identities

Solution Delivery & Customer Engagement

• Eliciting and documenting business and technical requirements
• Identity architecture and solution design
• Development of business rules and Identity logic
• User Acceptance Testing (UAT) planning and execution
• Knowledge transfer and operational handoff
• Comfortable working directly with C‑level and executive stakeholders

Compliance & Security Experience

• IAM support in regulated environments
• Familiarity with compliance and security frameworks (e.g., HIPAA, SOX)
• Secure access controls, auditing, and governance practices

Ideal Background

• Prior experience in healthcare, financial services, insurance, government, or education
• Combination of consulting, enterprise support, and engineering roles
• Strong troubleshooting skills across identity, directory, and authentication technologies