Remote Senior IAM Solution Architect – Hybrid Identity

Beacon Hill Staffing Group; Pierre (SD); Hybrid; USD 120,000 - 170,000; Part time

Job summary

Beacon Hill Staffing Group seeks an experienced Senior IAM Solution Architect to lead architecture and implementation across a critical identity project. You will evaluate the current IAM landscape, design practical current- and target-state solutions, and collaborate with security, cloud, and application teams to enable secure access across environments.

The role focuses on AD/Entra ID, hybrid identity, and identity security controls, delivering implementation-ready designs, migration plans,

Qualifications

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal IAM engineering or solution architecture experience.
• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Deep knowledge of AD security groups and nested groups; identity synchronization; access control models.
• Experience supporting complex migrations, environment separations, or enterprise transformations.
• Ability to troubleshoot IAM issues across users, groups, apps, services, and directories.
• Experience producing architecture diagrams, designs, migration procedures, and cutover docs.
• Ability to operate independently and meet aggressive deadlines.

Responsibilities

• Assess current IAM architectures, integrations, configurations, dependencies, and future‑state access patterns.
• Identify architectural gaps, security risks, and technical constraints.
• Design practical current-state, transitional, and target‑state IAM solutions.
• Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross‑environment access.
• Produce implementation‑ready architecture and technical documentation.
• Analyze and troubleshoot AD and Entra ID environments.
• Design and validate security groups, nested groups, entitlement mappings, and group‑based application access.
• Evaluate hybrid identity synchronization and authentication flows.
• Address directory trusts and dependencies between separated environments.
• Troubleshoot authentication, authorization, identity integration, and group membership issues.
• Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel.
• Translate application and business access requirements into IAM solutions.
• Resolve identity issues involving users, applications, administrators, service accounts, and system integrations.
• Facilitate technical sessions to resolve migration blockers.
• Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.
• Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements.
• Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access.
• Develop controls to prevent inappropriate cross‑environment access.
• Identify identity‑related migration dependencies and sequencing requirements.
• Develop IAM migration guidance and integration specifications.
• Create cutover, access‑validation, and rollback procedures.
• Support mock go‑live exercises, troubleshooting, testing, and defect remediation.
• Support production cutover and post‑cutover stabilization.

Skills

IAM Architecture

Microsoft Entra ID

Active Directory

Hybrid Identity

SSO & MFA

Identity Security

Tools

Active Directory

Entra ID

Job description

Beacon Hill Staffing Group seeks an experienced Senior IAM Solution Architect to lead architecture and implementation across a critical identity project. You will evaluate the current IAM landscape, design practical current- and target-state solutions, and collaborate with security, cloud, and application teams to enable secure access across environments.

The role focuses on AD/Entra ID, hybrid identity, and identity security controls, delivering implementation-ready designs, migration plans,