Sr IAM Architect
3core systemsTallahassee, FL
Sr IAM Architect
L7
3core systemsTallahassee, FLyesterday
Weston, Florida, United States | Posted on 10/22/2026
Title: IAMArchitect
Location: Weston, Florida (3 days onsite, hybrid)
Duration: Long-termcontract
Role
Summary:
- The Clientis seeking a senior
- Identity and Access Management Architecttoassess, modernize, and improve its user provisioning environment.
- Thearchitect will design secure, scalable, and reliable identity lifecycleprocesses across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications.
- The rolerequires strong hands-on provisioning expertise to establish authoritativeidentity sources, automate joiner/mover/leaver processes, support employeeand student identities, including dual affiliations, and implementmonitoring, reconciliation, error handling, and deprovisioning safeguards.
- Thearchitect will define the target-state IAM architecture, create a phasedmodernization roadmap, and guide implementation according to modern IAM, security, governance, and least-privilege practices.
- JobDescription:8+years of enterprise IAM experience, with significant responsibility foridentity architecture and user-provisioning design.
- Provenability to assess an existing provisioning environment and design amodern, scalable target-state architecture.
- Expertknowledge of end-to-end user provisioning across HR/SIS systems, identityplatforms, directories, and downstream applications.
- Experiencedesigning joiner, mover, leaver, rehire, return, and deprovisioningprocesses.
- Experiencehandling complex identity scenarios, including employee/student dualaffiliations, duplicate identities, role changes, and multiple sourcerecords.
- Experienceestablishing authoritative identity sources and ownership rules forcritical identity attributes.
- Strongexperience integrating Workday, Banner, or comparable HRIS, SIS, and ERPplatforms with IAM systems.
- Expertknowledge of Microsoft Entra ID, Active Directory, Entra Connect, CloudSync, and cross-tenant synchronization.
- Experiencedesigning automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware.
- Experienceimplementing provisioning safeguards, including reconciliation, validation, approval gates, retry processing, error handling, rollback, and mass-deletion protection.
- Abilityto design monitoring and alerting for failed provisioning, synchronizationissues, duplicate identifiers, stale accounts, and incomplete lifecycleevents.
- Experiencedefining modern access-assignment models using roles, groups, attributes, access packages, and least-privilege principles.
- Strongunderstanding of authentication, provisioning, authorization, and identitygovernance as separate but connected functions.
- Expertisewith SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos.
- Experiencemodernizing legacy IAM platforms, custom scripts, databases, manualworkflows, and duplicated provisioning logic.
- Abilityto define the appropriate long-term roles of on-premises AD, Entra ID, multiple tenants, and legacy identity platforms.
- Experiencedesigning identity governance, access reviews, privileged access, service-account governance, and timely access removal.
- Abilityto create current-state and target-state architecture, identity-flowdiagrams, source-of-authority matrices, attribute mappings, and lifecyclestandards.
- Abilityto produce a prioritized, phased modernization roadmap that can berealistically implemented without disrupting production.
- Hands-ontechnical ability to review configurations and code, analyze identitydata, troubleshoot provisioning failures, lead proofs of concept, andguide implementation.
- Strongcommunication and knowledge-transfer skills for working with technicalteams, business owners, leadership, and vendors.
Apply now (opens in a new tab)
Level
ManagerL7
Location
Tallahassee, FL
Occupation
Computer Systems Engineers/Architects
Industry
Computer Systems Design Services
Posted
yesterday
To get sharper similar jobs, create your profile using the link below.