Senior Identity & Access Management (IAM/IGA) Architect, Workday & Microsoft Entra ID

• Assess and reconcile Workday worker data against Entra ID / Active Directory identities; lead identity hygiene and stale/orphaned account clean-up.
• Design Workday-driven inbound provisioning to Entra ID and AD (Workday connector, API-driven inbound provisioning, Entra Connect / Cloud Sync), including just-in-time enablement.
• Engineer RBAC models (top-down and bottom-up role mining) across Workday security groups and Entra groups, app roles and administrative units.
• Define IGA operating models: Joiner-Mover-Leaver lifecycle, access requests and approvals, access certifications, separation of duties.
• Assess third-party application integration (SAML 2.0, OIDC, SCIM 2.0, APIs) and build application onboarding roadmaps.
• Write clear architecture, roadmap and executive deliverables; lead stakeholder workshops; serve as Key Personnel in client orals.

• 8+ years in enterprise IAM/IGA architecture.
• Hands-on Workday identity experience: worker data, supervisory organizations, security groups, business-process security, and Workday-to-AD/Entra provisioning.
• Deep Microsoft Entra ID experience: Conditional Access, PIM, dynamic groups, enterprise apps, provisioning, and Entra ID Governance (Lifecycle Workflows, Access Reviews, Entitlement Management).
• Experience with at least one IGA platform: SailPoint (IdentityIQ / Identity Security Cloud), Saviynt, or Okta Identity Governance.
• Role engineering and access certification program design.
• U.S.-based; able to pass a background check.

Preferred

• Higher-education IAM experience (multi-affiliation identities, eduPerson, InCommon).
• PeopleSoft-to-Workday migration exposure.
• CISSP, Microsoft SC-300, SailPoint or Saviynt certifications; PMP a plus.
• NIST CSF 2.0 / NIST SP 800-53 AC/IA mapping experience.

CyberStorm Defense is building a bench of identity architects for enterprise and higher-education modernization programs. You will lead the design of identity foundations: making Workday and Microsoft Entra ID agree about every person, designing role-based access control that holds up to audit, and building the governance that keeps it that way.