IAM Architect

• Design, implement, and maintain end-to-end Identity & Access Management architectures utilizing Microsoft Entra ID and Active Directory.
• Establish a long-term identity strategy aligned with business, security, and regulatory requirements.
• Architect secure hybrid identity models including Entra Connect, cloud sync strategies, and identity lifecycle automation.
• Drive adoption of Zero Trust identity principles, including continuous evaluation and least-privilege access.
• Lead design and optimization of Conditional Access policies, authentication flows, multi-factor authentication, passwordless strategies, and identity protection.
• Architect, standardize, and provide governance oversight for Entra ID Governance capabilities, including PIM, access reviews, entitlement management, and custom roles.
• Oversee configuration of Entra applications, service principals, federations, SCIM provisioning, and SSO integrations.
• Design secure, resilient, and scalable Active Directory domains, GPO structures, and privileged access boundaries.
• Partner with security operations, cloud platform engineering, and DevSecOps teams to integrate identity controls into landing zones and CI/CD pipelines.
• Deliver comprehensive architecture diagrams, strategic roadmaps, threat models, and solution documentation.

Education: Bachelor’s degree in Computer Science, Information Security, or a related technical discipline, or equivalent professional experience.

Experience: Eight or more years of dedicated experience in Identity & Access Management architecture or engineering, with a proven track record of managing enterprise-scale hybrid environments.

Technical Skills: Deep expertise in Microsoft Entra ID, Active Directory, GPO, and PKI; strong command of SSO protocols including OAuth2, OIDC, and SAML; proficiency with Terraform Infrastructure as Code (IaC) and PowerShell scripting.

Preferred Qualifications

• Relevant industry certifications such as SC-300, SC-100, AZ-305, or equivalent.
• Experience implementing Privileged Access Workstations (PAW) and Microsoft Identity Manager (MIM).
• Familiarity with modern IAM suites such as SailPoint, CyberArk, or Okta.
• Background in security architecture, threat modeling, or penetration testing related to identity systems.

Our organization is committed to delivering highly secure, resilient, and modern financial technology services. We foster a collaborative, engineering-first culture that prioritizes continuous improvement, mentorship, and professional growth. Team members are empowered to drive strategic technological initiatives that protect enterprise assets and enhance the user experience across all digital platforms.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at, UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.