IAM Architect (AD, SSO, PAM/PIM, Education Domain exp)

Job Title: IAM Architect (AD, SSO, PAM/PIM, Education Domain exp)

Location: Warren, Michigan Remote

We are currently seeking candidates who meet the following qualification

Requirements

• Full discovery and inventory of all human and machine accounts.
• Review of IAM architecture, policies, provisioning/deprovisioning, and onboarding/offboarding.
• Assessment of user lifecycle management, privileged identity (PIM), and access management (PAM).
• Conduct a gap analysis (limited to IAM) aligned with the CIS Security Framework.
• Identify risks, excessive privileges, privilege creep, and compliance concerns.
• Evaluate MFA, SSO, password policies, and exceptions not integrated with SSO/Active Directory.
• Assess all listed in-scope applications (Microsoft Entra ID, Office 365, SCCM, SharePoint, Salesforce, Canvas, etc.).
• Identify and evaluate "shadow IT" systems.
• IAM Roadmap with short/long-term milestones.
• Risk prioritization and mitigation strategies.
• Change management and governance recommendations.
• Familiarity with APIs, SSH, DNS, DHCP, SCCM, etc.

• Verifiable experience in conducting IAM audits.
• Proven knowledge of CIS controls and IAM-related compliance in higher education environments.
• Must not be employed by or affiliated with an IAM platform OEM (e.g., Okta, Microsoft, etc.).
• Must demonstrate objective, platform-neutral assessment capability.
• Ability to maintain knowledge transfer and collaboration with the college's IAM Specialist.
• Engage through stakeholder interviews, meetings, and documentation.
  
  If you meet these qualifications, please submit your application via link provided in Linkedin.
  Kindly do not call the general line to submit your application.