Senior Enterprise IAM Architect - Workday-Driven Identity

DUIT; Arbutus (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

No red tape

Competitive salaries

Health/Dental/Vision/Other Insurance

Excellent 401K plans

11 Paid Holidays & PTO

Educational Reimbursement

Limitless environment

Recognition of outstanding work

Opportunities for advancement

Job summary

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity management for a large public university. You will own the end-to-end target architecture, from Workday origins to Entra ID and Active Directory flow, and provisioning off legacy PeopleSoft identity flags.

You will turn assessment findings into a future-state design and a migration plan. The position is contingent on contract award, with anticipated start in February 2027, offering a high-impact,

Qualifications

• 8+ years in identity and access management
• Experience designing identity solutions for large enterprises
• HR-driven provisioning from Workday to Entra ID/AD with attribute mapping

Responsibilities

• Assess current identity architecture across Workday, Entra ID, and AD and design a centralized, scalable future-state architecture
• Define authoritative sources, ownership, and attribute mappings for governance and provisioning
• Design Workday-driven inbound provisioning to Entra ID and AD, including synchronization and just-in-time provisioning
• Trace PeopleSoft identity flag dependencies and architect migration sequencing, testing, and rollback
• Define standard integration patterns for SSO, SCIM provisioning, deprovisioning, and role assignment across third-party apps
• Produce architecture diagrams, decision records, and roadmaps and present in workshops

Skills

Identity & access management

Enterprise architecture

Workday provisioning

Entra ID/AD

RBAC governance

Facilitation/communication

Tools

Entra ID

Active Directory

Workday

SCIM

SAML

OIDC

Job description

DUIT, a Maryland-based identity and cybersecurity firm, is building a team to modernize identity management for a large public university. You will own the end-to-end target architecture, from Workday origins to Entra ID and Active Directory flow, and provisioning off legacy PeopleSoft identity flags.

You will turn assessment findings into a future-state design and a migration plan. The position is contingent on contract award, with anticipated start in February 2027, offering a high-impact,