Senior IAM Architect | Remote, AD & Entra Expert

Beacon Hill Staffing Group; Phoenix (AZ); Hybrid; USD 120,000 - 180,000; Part time

Job summary

Beacon Hill Technologies is seeking a Senior IAM Solution Architect to lead architecture and integration for a critical enterprise IAM separation initiative. The role focuses on evaluating the current IAM environment, identifying gaps, and delivering practical, implementation‑ready solutions across AD, Entra ID, hybrid identity, and access controls.

You will collaborate with application owners, cloud, security, and infrastructure teams; design SSO, MFA, and privilege access controls, and produce

Qualifications

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal‑level IAM engineering or solution architecture experience.
• Strong hands‑on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Deep knowledge of AD security groups and nested groups, identity synchronization, and access models.
• Experience with SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.
• Experience supporting complex migrations, environment separations, or enterprise transformation programs.

Responsibilities

• IAM Architecture & Solution Design: Assess architectures, gaps, risks, and constraints; design current-state, transitional, and target-state solutions; produce implementation‑ready architecture documentation.

Skills

IAM architecture

Active Directory

Entra ID

SSO & MFA

Hybrid identity

Tools

Microsoft Entra ID

Job description

Beacon Hill Technologies is seeking a Senior IAM Solution Architect to lead architecture and integration for a critical enterprise IAM separation initiative. The role focuses on evaluating the current IAM environment, identifying gaps, and delivering practical, implementation‑ready solutions across AD, Entra ID, hybrid identity, and access controls.

You will collaborate with application owners, cloud, security, and infrastructure teams; design SSO, MFA, and privilege access controls, and produce