IAM Architect (Onsite, remote option from South Florida ONLY) - Fort Lauderdale, FL in Port Saint Lucie

• Assess the current and access management environment and design a modern, scalable target-state IAM architecture;

\n

• Design secure lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;

\n

• Establish authoritative sources and ownership rules for critical attributes;

\n

• Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex scenarios such as employee/student dual affiliations;

\n

• Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure data integrity;

\n

• Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;

\n

• Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices

• Experience with enterprise and access management (IAM) architecture and user-provisioning design (8+ years);

\n

• Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including -flow diagrams, source-of-authority matrices, and attribute mappings;

\n

• Experience with end-to-end lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex scenarios such as employee/student dual affiliations and duplicate identities;

\n

• Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with management systems and establishing authoritative sources;

\n

• Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;

\n

• Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;

\n

• Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures;

\n

• Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;

\n

• Experience with governance, including access reviews, privileged access, and service-account governance;

\n

• Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos