Senior IAM Architect – AD/EntraID & Hybrid Identity

Beacon Hill Staffing Group; Saint Paul (MN); Remote; USD 140,000 - 190,000; Full time

Job summary

Beacon Hill Staffing Group is seeking an experienced Senior IAM Solution Architect to lead architecture and technical decisions for a critical enterprise identity initiative. The role emphasizes hands-on design across Microsoft Active Directory, Entra ID, hybrid identity, and secure access controls.

Responsibilities include evaluating current IAM environments, identifying gaps, and delivering implementation-ready solutions with strong collaboration across application owners, cloud teams, and

Qualifications

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal-level IAM engineering or solution architecture experience.
• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Deep knowledge of AD security groups and nested groups; identity synchronization; group-based access; authentication and authorization.
• Experience supporting complex enterprise migrations or environment separations.
• Ability to troubleshoot IAM issues across users, groups, apps, infrastructure, and directories.
• Ability to produce architecture diagrams, technical designs, migration procedures, and cutover documentation.

Responsibilities

• Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns.
• Identify gaps, security risks, and technical constraints; design current-state, transitional, and target-state IAM solutions.
• Evaluate identity trust boundaries, authentication methods, directory dependencies, and cross-environment access.
• Produce implementation-ready architecture and technical documentation.
• Analyze and troubleshoot AD and Entra ID environments; validate security groups and entitlement mappings.

Skills

IAM engineering

Solution architecture

Active Directory

Entra ID

Hybrid identity

SSO/MFA/CA

Identity lifecycle

Migration planning

Cross-team collaboration

Tools

AD security groups

Group-based access

Directory trusts

Job description

Beacon Hill Staffing Group is seeking an experienced Senior IAM Solution Architect to lead architecture and technical decisions for a critical enterprise identity initiative. The role emphasizes hands-on design across Microsoft Active Directory, Entra ID, hybrid identity, and secure access controls.

Responsibilities include evaluating current IAM environments, identifying gaps, and delivering implementation-ready solutions with strong collaboration across application owners, cloud teams, and