Senior IAM Solution Architect — Remote

Beacon Hill Staffing Group; Boise (ID); Hybride; USD 140 000 - 170 000; Plein temps

Résumé du poste

Beacon Hill Staffing Group is seeking an experienced Senior IAM Solution Architect to lead architecture for a critical enterprise separation initiative. The role focuses on evaluating the existing IAM environment, identifying gaps, and delivering implementation-ready solutions across Microsoft Active Directory, Microsoft Entra ID, and hybrid identity.

You will design security controls, authentication and authorization models, and support migration, cutover, and post-cutover stabilization while

Qualifications

• Extensive professional experience with enterprise Identity and Access Management.
• Senior/principal-level IAM engineering or solution architecture experience.
• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.
• Deep knowledge of:AD security groups and nested groupsIdentity synchronizationGroup-based application accessAuthentication and authorizationHybrid identity architectures.
• Experience supporting complex application or infrastructure migrations, environment separations, or enterprise transformation programs.
• Ability to troubleshoot IAM issues spanning users, groups, applications, infrastructure, service identities, and directories.
• Experience producing architecture diagrams, technical designs, migration procedures, testing requirements, and cutover documentation.
• Ability to operate independently and deliver under aggressive deadlines.

Responsabilités

• Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns.
• Identify architectural gaps, security risks, and technical constraints.
• Design practical current-state, transitional, and target-state IAM solutions.
• Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross-environment access.
• Produce implementation-ready architecture and technical documentation.
• Analyze and troubleshoot AD/Entra ID environments.
• Design security groups, entitlement mappings, and group-based access.
• Evaluate hybrid identity synchronization and authentication flows.
• Address directory trusts and dependencies between separated environments.
• Troubleshoot authentication, authorization, identity integration, and group membership issues.
• Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel.
• Translate application and business access requirements into IAM solutions.
• Resolve identity issues involving users, applications, administrators, service accounts, and system integrations.
• Facilitate technical sessions to resolve migration blockers.
• Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.
• Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements.
• Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access.
• Develop controls to prevent inappropriate cross-environment access.
• Identify identity-related migration dependencies and sequencing requirements.
• Develop IAM migration guidance and integration specifications.
• Create cutover, access-validation, and rollback procedures.
• Support mock go-live exercises, troubleshooting, testing, and defect remediation.
• Support production cutover and post-cutover stabilization.

Connaissances

IAM engineering

Solution architecture

Active Directory

Entra ID

Hybrid identity

SSO & MFA

Identity security controls

Migration planning

Access management

Outils

Microsoft Entra ID

Active Directory

SSO

Federation

Description du poste

Beacon Hill Staffing Group is seeking an experienced Senior IAM Solution Architect to lead architecture for a critical enterprise separation initiative. The role focuses on evaluating the existing IAM environment, identifying gaps, and delivering implementation-ready solutions across Microsoft Active Directory, Microsoft Entra ID, and hybrid identity.

You will design security controls, authentication and authorization models, and support migration, cutover, and post-cutover stabilization while