> Markdown version of [/jobs/ext/3928526-iam-architect-onsite-remote-option-from-south-florida-only-fort-lauderdale-fl-in-port-saint-lucie](https://www.wearedevelopers.com/jobs/ext/3928526-iam-architect-onsite-remote-option-from-south-florida-only-fort-lauderdale-fl-in-port-saint-lucie). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Architect (Onsite, remote option from South Florida ONLY) - Fort Lauderdale, FL in Port Saint Lucie

- **Company:** Energy Jobline
- **Location:** Port St. Lucie, FL, United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Microsoft Online Services, Cloud Computing, Data Integrity, Human Resources Information System (HRIS), Middleware, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Azure Active Directory, Security Assertion Markup Language (SAML), SQL Databases, Systems Integration, Break Fix, Banner Advertisement, Workday
- **Published:** October 26, 2026
- **Apply:** https://www.energyjobline.com/job/iam-architect-onsite-remote-option-south-florida-only-fort-lauderdale-fl-port-saint-lucie

## About the Role

* Experience with enterprise and access management (IAM) architecture and user-provisioning design (8+ years);

\n

 * Experience with assessing legacy IAM environments, designing modern target-state architectures, and producing phased modernization roadmaps, including -flow diagrams, source-of-authority matrices, and attribute mappings;

\n

 * Experience with end-to-end lifecycle management, including joiner, mover, leaver, rehire, and deprovisioning processes, and complex scenarios such as employee/student dual affiliations and duplicate identities;

\n

 * Experience integrating HRIS/SIS/ERP platforms (e.g., Workday, Banner) with management systems and establishing authoritative sources;

\n

 * Experience with Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization;

\n

 * Experience with automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware;

\n

 * Experience implementing provisioning safeguards and monitoring, including reconciliation, validation, approval gates, error handling, rollback, alerting for failed provisioning or stale accounts, and hands-on troubleshooting of provisioning failures;

\n

 * Experience defining access-assignment models using roles, groups, attributes, and access packages based on least-privilege principles;

\n

 * Experience with governance, including access reviews, privileged access, and service-account governance;

\n

 * Expertise with SAML, OIDC/OAuth, SCIM, LDAP, and Kerberos

## Description

* Assess the current and access management environment and design a modern, scalable target-state IAM architecture;

\n

 * Design secure lifecycle processes across Workday, Banner, Active Directory, Microsoft Entra ID, OneLogin, and downstream applications;

\n

 * Establish authoritative sources and ownership rules for critical attributes;

\n

 * Automate joiner, mover, leaver, rehire, and deprovisioning processes, including support for complex scenarios such as employee/student dual affiliations;

\n

 * Implement monitoring, reconciliation, error handling, and deprovisioning safeguards to ensure data integrity;

\n

 * Develop a prioritized, phased modernization roadmap that can be implemented without disrupting production;

\n

 * Guide implementation of IAM initiatives in alignment with modern security, governance, and least-privilege practices