Remote Senior IAM Architect: Entra ID & AD

Beacon Hill Staffing Group; Annapolis (MD); Hybrid; USD 150,000 - 190,000; Full time

Job summary

Beacon Hill Technologies is seeking a Senior IAM Solution Architect to lead architecture and technical work for a critical enterprise identity project. The role focuses on evaluating IAM environments, bridging gaps, and delivering practical, implementable solutions across AD, Entra ID, and hybrid identity.

The candidate will design secure access models, federation, and MFA strategies, while coordinating with business and cloud teams to migrate and secure identities, with emphasis on execution

Qualifications

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal-level IAM engineering or solution architecture experience.
• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Deep knowledge of AD security groups, synchronization, and entitlement mappings.
• Experience with SSO, federation, MFA, and Conditional Access.

Responsibilities

• Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns.
• Identify architectural gaps, security risks, and technical constraints.
• Design current-state, transitional, and target-state IAM solutions.
• Troubleshoot identity, authentication, and authorization issues across environments.
• Produce implementation-ready architecture and technical documentation.

Skills

IAM architecture

Hybrid identity

SSO & MFA

Conditional Access

Identity lifecycle

Migration planning

Troubleshooting IAM

Tools

Active Directory

Entra ID

Job description

Beacon Hill Technologies is seeking a Senior IAM Solution Architect to lead architecture and technical work for a critical enterprise identity project. The role focuses on evaluating IAM environments, bridging gaps, and delivering practical, implementable solutions across AD, Entra ID, and hybrid identity.

The candidate will design secure access models, federation, and MFA strategies, while coordinating with business and cloud teams to migrate and secure identities, with emphasis on execution