> Markdown version of [/jobs/ext/4281874-senior-identity-access-management-iam-iga-architect-workday-microsoft-entra-id](https://www.wearedevelopers.com/jobs/ext/4281874-senior-identity-access-management-iam-iga-architect-workday-microsoft-entra-id). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Identity & Access Management (IAM/IGA) Architect, Workday & Microsoft Entra ID

- **Company:** Cyberstorm Defense L.L.C.
- **Location:** Hyattsville, MD, United States
- **Experience:** Expert
- **Salary:** $95,900.0 - $116,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Active Directory, Application Programming Interfaces (APIs), Application Integration Architecture, Cloud Computing, Identity and Access Management, OpenID, Program Design Languages, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Okta, Workday Security, National Institute of Standards and Technology Cybersecurity Framework, People Soft, Api Design, SailPoint, Workday
- **Published:** October 28, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=4a976a49849534a8

## About the Role

* 8+ years in enterprise IAM/IGA architecture.
 * Hands-on Workday identity experience: worker data, supervisory organizations, security groups, business-process security, and Workday-to-AD/Entra provisioning.
 * Deep Microsoft Entra ID experience: Conditional Access, PIM, dynamic groups, enterprise apps, provisioning, and Entra ID Governance (Lifecycle Workflows, Access Reviews, Entitlement Management).
 * Experience with at least one IGA platform: SailPoint (IdentityIQ / Identity Security Cloud), Saviynt, or Okta Identity Governance.
 * Role engineering and access certification program design.
 * U.S.-based; able to pass a background check.

Preferred

 * Higher-education IAM experience (multi-affiliation identities, eduPerson, InCommon).
 * PeopleSoft-to-Workday migration exposure.
 * CISSP, Microsoft SC-300, SailPoint or Saviynt certifications; PMP a plus.
 * NIST CSF 2.0 / NIST SP 800-53 AC/IA mapping experience.

## Description

* Assess and reconcile Workday worker data against Entra ID / Active Directory identities; lead identity hygiene and stale/orphaned account clean-up.
 * Design Workday-driven inbound provisioning to Entra ID and AD (Workday connector, API-driven inbound provisioning, Entra Connect / Cloud Sync), including just-in-time enablement.
 * Engineer RBAC models (top-down and bottom-up role mining) across Workday security groups and Entra groups, app roles and administrative units.
 * Define IGA operating models: Joiner-Mover-Leaver lifecycle, access requests and approvals, access certifications, separation of duties.
 * Assess third-party application integration (SAML 2.0, OIDC, SCIM 2.0, APIs) and build application onboarding roadmaps.
 * Write clear architecture, roadmap and executive deliverables; lead stakeholder workshops; serve as Key Personnel in client orals.