Job description

14820 – IAM Architect (Onsite) – Fort Lauderdale, FL Start Date: ASAP Type: Temporary Project Estimated Duration: 12+ months with possible extensions Work Setting: 100% of the time at the Client’s site. No telecommuting or remote work. This is a non-negotiable requirement from the client. Only candidates able to relocate as required should apply to avoid removal from future consideration. Our client is filling this contract position exclusively through approved staffing partners, so this opportunity is not available by applying directly with the client. If you're interested, we'd be happy to represent you throughout the hiring process. Required: • Availability to work 100% of the time at the Client’s site in Fort Lauderdale, FL (required); • Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years); • Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including identity-flow diagrams, source-of-authority matrices, and attribute mappings; • Experience with end-to-end identity lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex identity scenarios such as employee/student dual affiliations and duplicate identities; • Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources; • Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization; • Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware; • Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures; • Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles; • Experience with identity governance, including access reviews, privileged access, and service-account governance; • Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos; Responsibilities include but are not limited to the following: • Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture; • Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications; • Establish authoritative identity sources and ownership rules for critical identity attributes; • Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations; • Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity; • Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production; • Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices;

Requirements

Must-haves

14820 – IAM Architect (Onsite) – Fort Lauderdale, FL
Start Date: ASAP
Type: Temporary Project
Estimated Duration: 12+ months with possible extensions
Work Setting: 100% of the time at the Client’s site. No telecommuting or remote work. This is a non-negotiable requirement from the client.
Only candidates able to relocate as required should apply to avoid removal from future consideration.
Availability to work 100% of the time at the Client’s site in Fort Lauderdale, FL (required);
Experience with enterprise identity and access management (IAM) architecture and user-provisioning design (8+ years);
Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with identity management systems and establishing authoritative identity sources;
Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;
Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;
Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;
Experience with identity governance, including access reviews, privileged access, and service-account governance;
Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos;
Responsibilities include but are not limited to the following:
Assess the current identity and access management environment and design a modern, scalable target-state IAM architecture;
Design secure identity lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;
Establish authoritative identity sources and ownership rules for critical identity attributes;
Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex identity scenarios such as employee/student dual affiliations;
Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure identity data integrity;
Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;
Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices;

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

sql

Platform: catsone
Effort: medium

Benefits

Benefits detected in the listing.

Vision