IAM Solution Architect (Contract | Madison, WI or Remote)

Position Type: Contract
Duration: November 16, 2026 - May 14, 2027
Schedule: Approximately 32-40 hours/week initially
Work Arrangement: Primarily remote with availability during U.S. Central Time business hours. Occasional onsite meetings in the Madison, Wisconsin area may be required.

Position Summary

Key Responsibilities

• Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns.


• Identify architectural gaps, security risks, and technical constraints.


• Design practical current-state, transitional, and target-state IAM solutions.


• Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross-environment access.


• Produce implementation-ready architecture and technical documentation.

• Analyze and troubleshoot AD and Entra ID environments.


• Design and validate security groups, nested groups, entitlement mappings, and group-based application assignments.


• Evaluate hybrid identity synchronization and authentication flows.


• Address directory trusts and dependencies between separated environments.


• Troubleshoot authentication, authorization, identity integration, and group membership issues.

• Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel.


• Translate application and business access requirements into IAM solutions.


• Resolve identity issues involving users, applications, administrators, service accounts, and system integrations.


• Facilitate technical sessions to resolve migration blockers.

• Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.


• Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements.


• Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access.


• Develop controls to prevent inappropriate cross-environment access.

• Identify identity-related migration dependencies and sequencing requirements.


• Develop IAM migration guidance and integration specifications.


• Create cutover, access-validation, and rollback procedures.


• Support mock go-live exercises, troubleshooting, testing, and defect remediation.


• Support production cutover and post-cutover stabilization.

Required Qualifications

• Extensive professional experience with enterprise Identity and Access Management.


• Senior/principal-level IAM engineering or solution architecture experience.


• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.


• Deep knowledge of:
  
  
  
  • AD security groups and nested groups
  
  
  • Identity synchronization
  
  
  • Group-based application access
  
  
  • Authentication and authorization
  
  
  • Hybrid identity architectures
  
  
  
  


• Experience with SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.


• Experience supporting complex application or infrastructure migrations, environment separations, or enterprise transformation programs.


• Ability to troubleshoot IAM issues spanning users, groups, applications, infrastructure, service identities, and directories.


• Experience producing architecture diagrams, technical designs, migration procedures, testing requirements, and cutover documentation.


• Ability to operate independently and deliver under aggressive deadlines.

Preferred Qualifications

• Experience with enterprise environment segmentation or separation.


• Multiple AD domain or Entra tenant experience.


• Complex application entitlement mapping experience.


• Experience in healthcare, government contracting, or another regulated environment.


• Understanding of Zero Trust Architecture.


• Production migration rehearsal, cutover, and stabilization experience.