Identity and Access Management Architect

12+ years of enterprise IAM experience, with significant responsibility for identity architecture and user-provisioning design.
Proven ability to assess an existing provisioning environment and design a modern, scalable target-state architecture.
Expert knowledge of end-to-end user provisioning across HR/SIS systems, identity platforms, directories, and downstream applications.
Experience designing joiner, mover, leaver, rehire, return, and deprovisioning processes.
Experience handling complex identity scenarios, including employee/student dual affiliations, duplicate identities, role changes, and multiple source records.
Experience establishing authoritative identity sources and ownership rules for critical identity attributes.
Strong experience integrating Workday, Banner, or comparable HRIS, SIS, and ERP platforms with IAM systems.
Expert knowledge of Microsoft Entra ID, Active Directory, Entra Connect, Cloud Sync, and cross-tenant synchronization.
Experience designing automated provisioning using SCIM, APIs, Microsoft Graph, PowerShell, SQL, file-based integrations, and middleware.
Experience implementing provisioning safeguards, including reconciliation, validation, approval gates, retry processing, error handling, rollback, and mass-deletion protection.