IAM Architect

About the role

A 12-month contract position for a Senior Analyst focused on the adoption and rollout of IDP integrations (Active Directory and Microsoft Entra ID) across internal, SaaS, and cloud applications.

Responsibilities

• Work with application and service owners to adopt SSO and modern authentication patterns.
• Review and improve domain services proactive monitoring, management, and alerting.
• Assist in ITDR (Identity Threat Detection and Response) exercises and BCDR (Business Continuity and Disaster Recovery) initiatives.
• Operationalize modern authentication practices.
• Support MFA, SSO, B2B, and B2C authentication patterns.
• Collaborate with security and enterprise teams to implement and enforce regulatory compliance and standards adherence.
• Create and manage automation for routine administrative tasks.
• Assist with on-premises Domain projects, including vulnerability remediations and Domain retirements.
• Participate in a monthly on-call rotation with other team members.

Requirements

• 2+ years of direct hands-on experience in Identity and Access Management Systems.
• Experience with Microsoft Entra ID Services/Azure Active Directory (AAD) Administration.
• Expertise in Microsoft Active Directory (On-Premises).
• Expert knowledge of Directory Services protocols (legacy and modern), including LDAP, Kerberos, NTLM, SAML, OAuth, and Auth0.
• Proficiency in scripting and automation using PowerShell and Microsoft Graph.
• Proficient knowledge of User/Group OUs and Group Policy Objects.
• Experience with AD Sites & Services.
• Working knowledge of Splunk for dashboards and reporting.
• Experience with PKI, Certificate Authorities (CA), and Keyfactor (PKI Management).
• Ability to collaborate with Agile teams using Jira and Confluence to track engineering tasks, document processes, and enhance collaboration.

Experience with ServiceNow is a plus.