Senior IAM Architect

This is a fully remote position, open to applicants in Alabama, +44 more locations.

📋 Description

• Design, document, and oversee the evolution of identity and access management capabilities for Xtensys and its clientele.

• Actively monitor identity systems, access trends, lifecycle processes, and audit logs for irregularities and compliance breaches.

• Investigate irregularities, document underlying causes, and execute or suggest remedial actions.

• Uphold monitoring practices for inactive accounts, orphaned access, offboarding adherence, and privilege escalation.

• Maintain a risk and improvement register for the IAM program.

• Evaluate, document, and establish baselines for Joiner, Mover, Leaver, Leave of Absence, and Reactivation workflows.

• Keep architecture diagrams, process flows, and system integration maps up to date.

• Design, implement, and enhance lifecycle workflows across Active Directory, Microsoft Entra ID, and integrated SaaS platforms.

• Automate lifecycle tasks in ManageEngine ADManager Plus and enhance Jira and Workday integrations.

• Implement ManageEngine M365 Manager for lifecycle management of Microsoft 365, governance reporting, and access controls.

• Create and execute access certification initiatives, attestation workflows, and governance reporting.

• Develop roadmaps for the expansion of automation and governance capabilities.

• Design and execute enterprise RBAC models within Active Directory and Entra ID.

• Conduct access reviews, recertifications, and collect audit evidence.

• Formulate and enforce IAM policies and lifecycle service level agreements (SLAs).

• Collaborate with cybersecurity and compliance teams on HIPAA, NIST 800-53, and audit-related requirements.

• Act as the senior technical escalation point for identity-related tickets, provisioning issues, and access disputes.

• Oversee IAM infrastructure and proactively address performance, availability, and security challenges.

• Mentor or provide technical guidance to junior IAM team members without formal supervisory duties.

⛳️ Requirements

• Over 8 years of hands-on IAM experience, including design, implementation, and operational oversight of enterprise identity systems.

• Proven experience in producing current state assessments, IAM program roadmaps, and communications for executive audiences.

• Skilled in designing and managing Joiner, Mover, Leaver workflows within complex multi-domain or post-merger settings.

• Familiarity with Workday-to-Active Directory integration, HR-driven provisioning, attribute mapping, and lifecycle synchronization.

• Experience in healthcare or regulated industries with HIPAA compliance requirements.

• Extensive knowledge of Microsoft Active Directory and Microsoft Entra ID, including hybrid identity, Conditional Access, and delegated administration.

• Strong proficiency in PowerShell scripting.

• Expertise in ManageEngine ADManager Plus.

• Experience with ManageEngine M365 Manager.

• Knowledge of SAML, OAuth 2.0, OIDC, SCIM, and LDAP protocols.

• Working knowledge of Jira.

• Experience designing IAM programs in post-merger or multi-entity environments.

• ManageEngine Certified Professional or equivalent IGA platform certification is preferred.

• Microsoft Identity and Access Administrator (SC-300) or equivalent Entra ID certification is preferred.

• On-call support may be necessary approximately once every six weeks.

• Occasional travel (5% or less) may be required.

• Sedentary work requiring occasional exertion of up to 10 pounds of force.

🏝️ Benefits

• Autonomy and ownership of projects.

• Opportunities to broaden skill sets and mentor others.

• Potential responsibilities for mentoring or providing technical direction.

• Remote work arrangements available.

• Occasional travel (5% or less) for team meetings and collaboration.