IAM Solution Architect (Contract | Madison, WI or Remote)

Job Duties

Beacon Hill was founded to set a new standard in search, career placement and flexible staffing.

Position Type: Contract

Duration: November 16, 2026 - May 14, 2027

Schedule: Approximately 32-40 hours/week initially

Work Arrangement: Primarily remote with availability during U.S. Central Time business hours. Occasional onsite meetings in the Madison, Wisconsin area may be required.

Position Summary

We are seeking an experienced, hands-on Senior IAM Solution Architect to provide architecture and technical leadership for a critical enterprise environment-separation initiative.

The role will focus on rapidly evaluating the existing IAM environment, identifying architectural and integration gaps, and developing practical, implementation-ready solutions. The architect will work extensively across Microsoft Active Directory, Microsoft Entra ID, hybrid identity, application access, authentication, authorization, and identity security controls.

This is an execution-focused technical architecture role, rather than a general IAM advisory, assessment-only, or project management position.

Key Responsibilities

IAM Architecture & Solution Design

Assess current IAM architectures, integrations, configurations, dependencies, and future-state access patterns.

Identify architectural gaps, security risks, and technical constraints.

Design practical current-state, transitional, and target-state IAM solutions.

Evaluate identity trust boundaries, authentication methods, directory dependencies, authorization models, and cross-environment access.

Produce implementation-ready architecture and technical documentation.

Active Directory & Microsoft Entra ID

Analyze and troubleshoot AD and Entra ID environments.

Design and validate security groups, nested groups, entitlement mappings, and group-based application assignments.

Evaluate hybrid identity synchronization and authentication flows.

Address directory trusts and dependencies between separated environments.

Troubleshoot authentication, authorization, identity integration, and group membership issues.

Application & Business Integration

Partner with application owners, business stakeholders, cloud teams, infrastructure engineers, and cybersecurity personnel.

Translate application and business access requirements into IAM solutions.

Resolve identity issues involving users, applications, administrators, service accounts, and system integrations.

Facilitate technical sessions to resolve migration blockers.

Identity Security

Design solutions involving SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.

Evaluate provisioning/deprovisioning and joiner/mover/leaver requirements.

Address service accounts, machine identities, workload authentication, legacy authentication, and emergency access.

Develop controls to prevent inappropriate cross-environment access.

Migration & Cutover

Identify identity-related migration dependencies and sequencing requirements.

Develop IAM migration guidance and integration specifications.

Create cutover, access-validation, and rollback procedures.

Support mock go-live exercises, troubleshooting, testing, and defect remediation.

Support production cutover and post-cutover stabilization.

Required Qualifications

Extensive professional experience with enterprise Identity and Access Management.

Senior/principal-level IAM engineering or solution architecture experience.

Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID.

Deep knowledge of:

AD security groups and nested groups

Identity synchronization

Group-based application access

Authentication and authorization

Hybrid identity architectures

Experience with SSO, federation, MFA, Conditional Access, privileged access, and identity lifecycle management.

Experience supporting complex application or infrastructure migrations, environment separations, or enterprise transformation programs.

Ability to troubleshoot IAM issues spanning users, groups, applications, infrastructure, service identities, and directories.

Experience producing architecture diagrams, technical designs, migration procedures, testing requirements, and cutover documentation.

Ability to operate independently and deliver under aggressive deadlines.

Preferred Qualifications

Experience with enterprise environment segmentation or separation.

Multiple AD domain or Entra tenant experience.

Complex application entitlement mapping experience.

Experience in healthcare, government contracting, or another regulated environment.

Understanding of Zero Trust Architecture.

Production migration rehearsal, cutover, and stabilization experience.Beacon Hill is an equal opportunity employer and individuals with disabilities and/or protected veterans are encouraged to apply.

California residents: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

If you would like to complete our voluntary self-identification form, please click here or copy and paste the following link into an open window in your browser: https://jobs.beaconhillstaffing.com/eeoc/

Completion of this form is voluntary and will not affect your opportunity for employment, or the terms or conditions of your employment. This form will be used for reporting purposes only and will be kept separate from all other records.

Company Profile:

Beacon Hill Technologies, a premier National Information Technology Staffing Group, provides world class technology talent across all industries utilizing a complete suite of staffing services. Beacon Hill Technologies' dedicated team of recruiting and staffing experts consistently delivers quality IT professionals to solve our customers' technical and business needs.

Beacon Hill Technologies covers a broad spectrum of IT positions, including Project Management and Business Analysis, Programming/Development, Database, Infrastructure, Quality Assurance, Production/Support and ERP roles.

Learn more about Beacon Hill and our specialty divisions, Beacon Hill Associates, Beacon Hill Financial, Beacon Hill HR, Beacon Hill Legal, Beacon Hill Life Sciences and Beacon Hill Technologies by visiting www.bhsg.com .

Benefits Information:

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.

We look forward to working with you.

Beacon Hill. Employing the Future

Apply here: https://www.aplitrak.com/?adid=YmJnZW5lcmljLjIzMTEyLjEzNzk4QGJlYWNvbmhpbGxjb21wLmFwbGl0cmFrLmNvbQ

Minimum Education Required

Not Specified

Minimum Experience Required

Not Specified

Shift

First (Day)

Number of Openings

1

Compensation

$80.00 - $85.00 / Hourly

Postal Code

55155

Job Type

Full Time

Place of Work

On-site

Requisition ID

102356

Job Benefits

See job description