IAM Solution Architect (Contract | Madis

JOB REQUIREMENTS: Position Type: Contract Duration: November 16, 2026 - May 14, 2027 Schedule: Approximately 32-40 hours/week initially Work Arrangement: Primarily remote with availability during U.S. Central Time business hours. Occasional onsite meetings in the Madison, Wisconsin area may be required. Position Summary We are seeking an experienced, hands-on Senior IAM Solution Architect to provide architecture and technical leadership for a critical enterprise environment-separation initiative. The role will focus on rapidly evaluating the existing IAM environment, identifying architectural and integration gaps, and developing practical, implementation-ready solutions. The architect will work extensively across Microsoft Active Directory, Microsoft Entra ID, hybrid identity, application access, authentication, authorization, and identity security controls. This is an execution-focused technical architecture role, rather than a general IAM advisory, assessment-only, or project management position. Key Responsibilities IAM Architecture & Solution Design * Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns. * Identify architectural gaps, security risks, and technical constraints. * Design practical current-state, transitional, and target-state IAM solutions. * Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross-environment access. * Produce implementation-ready architecture and technical documentation. Active Directory & Microsoft Entra ID * Analyze and troubleshoot AD and Entra ID environments. * Design and validate security groups, nested groups, entitlement mappings, and group-based application assignments. * Evaluate hybrid identity synchronization and authentication flows. * Address directory trusts and dependencies between separated environments. * Troubleshoot authentication, authorization, identity integration, and group membership issues. Application & Business Integration * Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel. * Translate application and business access requirements into IAM solutions. * Resolve identity issues involving users, applications, administrators, service accounts, and system integrations. * Facilitate technical sessions to resolve migration blockers. Identity Security * Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management. * Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements. * Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access. * Develop controls to prevent inappropriate cross-environment access. Migration & Cutover * Identify identity-related migration dependencies and sequencing requirements. * Develop IAM migration guidance and integration specifications. * Create cutover, access-validation, and rollback procedures. * Support mock go-live exercises, troubleshooting, testing, and defect remediation. * Support production cutover and post-cutover stabilization. Required Qualifications * Extensive professional experience with enterprise Identity and Access Management. * Senior/principal-level IAM engineering or solution architecture experience. * Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID. * Deep knowledge of: * AD security groups and nested groups * Identity synchronization * Group-based application access * Authentication and authorization * Hybrid identity architectures * Experience with SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management. * Experience supporting complex appl To view the full job description please use the link below. https://www.aplitrak.com/?adid=YmJnZW5lc ljLjY1ODA1Ljg3NzBAYmVhY29uaGlsbGNvbXAuYXBsaXRyYWsuY29t ***** APPLICATION INSTRUCTIONS: Apply Online: https://www.aplitrak.com/?adid=YmJnZW5lcmljLjY1ODA1Ljg3NzBAYmVhY29uaGlsbGNvbXAuYXBsaXRyYWsuY29t