Job#: 3056673 Job Description: Our client is seeking a highly experienced, hands-on Senior Identity and Access Management (IAM) Solution Architect to provide immediate technical expertise and architectural support for a critical enterprise environment-separation initiative.
This initiative involves separating approximately 30% of the organization's infrastructure and personnel into distinct operating environments, including the migration and realignment of supporting applications, systems, data, and identity services. Application transitions are expected to be primarily on-premises-to-on-premises and cloud-to-cloud, with limited exceptions.
The project has scheduled mock go-live exercises in December 2026 and January 2027, with full operational separation targeted for February 2027.
The selected individual must be capable of rapidly understanding the existing technical environment, evaluating current IAM architectures and assumptions, identifying gaps, and developing practical, implementation-ready solutions. This position requires substantial interaction with application owners, infrastructure teams, cloud engineering, cybersecurity personnel, and business stakeholders.
This is an execution-focused technical architecture position, not a general IAM advisory, assessment-only, or project management role.The objective is not to redesign the organization's overall IAM strategy, implement a new enterprise role-based access control (RBAC) model, or undertake other extensive IAM transformation activities. The immediate priority is identifying and implementing targeted, achievable solutions that support the established project timeline while maintaining appropriate security controls.
Key Responsibilities1. IAM Architecture Assessment and Solution Design- Rapidly assess existing IAM architecture, configurations, technical documentation, design assumptions, integration dependencies, and proposed future-state access patterns.
- Identify architectural gaps, technical constraints, integration issues, and security risks that may impede successful environment separation.
- Develop detailed, implementation-ready technical solutions and architectural designs that address identified IAM challenges.
- Evaluate identity trust boundaries, authentication mechanisms, directory dependencies, authorization models, and cross-environment access requirements.
- Recommend practical remediation strategies that balance security, operational continuity, technical feasibility, and project deadlines.
- Document current-state, target-state, and transitional IAM architecture, including technical diagrams, dependencies, and implementation considerations.
2. Active Directory and Microsoft Entra ID Integration- Analyze and troubleshoot Microsoft Active Directory (AD) and Microsoft Entra ID identity and group configurations.
- Design and validate security group structures, nested group memberships, group-based application assignments, and entitlement mappings.
- Evaluate hybrid identity synchronization, authentication flows, directory trust relationships, and access dependencies across separated environments.
- Develop practical solutions for maintaining authorized application and system access during migration.
- Identify and resolve authentication, authorization, group membership, and identity integration issues arising from environment separation.
- Establish appropriate group mappings, access validation methods, and rollback approaches for affected migration activities.
3. Business and Application Integration Support- Work directly with business stakeholders, application owners, and technical teams to understand access requirements and operational dependencies.
- Translate business access requirements into actionable IAM technical solutions.
- Resolve complex IAM-related issues affecting applications, users, administrators, service accounts, and system integrations.
- Identify necessary identity and access patterns for systems transitioning between environments.
- Collaborate with infrastructure, cloud, network, application development, and cybersecurity teams to ensure proposed solutions can be implemented successfully.
- Provide hands-on technical troubleshooting and targeted IAM configuration support when authorized.
- Facilitate technical working sessions to accelerate design decisions, eliminate blockers, and keep migration activities on schedule.
4. Identity Security and Access Controls- Assess and develop appropriate solutions involving single sign-on (SSO), federation, multifactor authentication (MFA), conditional access, privileged access, and identity lifecycle management.
- Evaluate provisioning and deprovisioning requirements, including joiner, mover, and leaver processes.
- Address machine identities, service accounts, workload authentication, emergency access, and legacy authentication dependencies.
- Identify and recommend controls to prevent unauthorized cross-environment access.
- Document temporary access exceptions and compensating security controls necessary during transition.
- Ensure IAM architecture recommendations align with applicable WPS security policies and regulatory requirements.
5. Migration, Testing, and Go-Live Support- Identify IAM-related migration dependencies and define necessary sequencing across application and infrastructure migration waves.
- Develop detailed IAM implementation guidance, integration specifications, and technical design documentation.
- Prepare IAM-specific cutover plans, access validation procedures, and rollback runbooks in advance of the December 2026 mock go-live.
- Participate in December 2026 and January 2027 mock go-live exercises, including IAM testing, troubleshooting, and issue resolution.
- Support end-to-end authentication, authorization, privileged access, group membership, and application access testing.
- Identify and resolve IAM defects discovered during mock migrations and readiness assessments.
- Update technical documentation, implementation procedures, and cutover plans based on testing results.
- Provide technical support for the February 2027 production cutover, including escalation of critical IAM issues and post-cutover stabilization activities when required.
6. Technical Documentation and Stakeholder Communication- Maintain accurate IAM architectural diagrams, design decisions, technical specifications, and integration documentation.
- Establish and maintain an IAM-related issue, risk, dependency, and remediation backlog.
- Document recommended solutions, implementation requirements, accountable technical owners, and target completion dates.
- Communicate architectural concerns and project risks clearly to technical teams, business stakeholders, and cybersecurity leadership.
- Provide regular progress updates on technical deliverables, open decisions, identified blockers, and schedule impacts.
- Transfer knowledge and technical documentation to internal IAM and IT teams throughout the assignment.
Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.
Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at
Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.
Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.
If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at or . Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.
UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.
