IAM Architect

Role Overview

Design and own Identity & Access Management (IAM) architecture for an enterprise environment.

Contract Details

• Type: 12-month contract (potential extension or conversion)
• Remote: Fully remote
• Interview: 60-minute Teams interview (1-step)
• Sponsorship: Not available now or upon conversion

Responsibilities

• Own IAM architecture for an organization (5,000–10,000 users)
• Define Conditional Access strategies at enterprise scale
• Support enterprise integrations, including Microsoft identity and application registration patterns
• Enable authentication/authorization across on-prem and cloud identity environments
• Directly support audits related to identity and access controls
• Provide knowledge and guidance for federation and cross-tenant trust models

Required Skills & Experience

• 10+ years experience in identity, security, or enterprise architecture
• Strong Microsoft IAM expertise, including Microsoft Entra ID, Active Directory (on-prem and hybrid), and authentication/authorization models
• Microsoft Entra (Azure AD) / Entra ID and Intune knowledge, including enterprise integration patterns
• App registrations and MFA setup
• Familiarity with Okta integrations (SSO and provisioning) as part of an identity platform integration program
• Experience with identity protocols and authorization:
  • SAML
  • OAuth
  • OpenID Connect
  • Delegated and application permissions
  • Federation and cross-tenant trust models
  • SPNs

Nice-to-Haves

• Familiarity with centralized logging/identity telemetry platforms such as:
  • Azure Data Explorer (ADX)
  • Event Hubs
  • Varonis