Job description
Job Title: Solutions Architect (Remote)
Location: Jackson, MS
Duration: 12 Months
Job Description:
The Client seeks a part-time Identity and Access Management (IAM) Solutions Architect Consultant to continue and expand the client modernization of identity, access, and device management services using Microsoft cloud technologies. This consultant will provide architectural guidance, technical implementation, and automation design to ensure a secure, compliant, and efficient identity platform based on Microsoft Entra ID, M365/O365, and Intune. The position is ideally suited for a senior-level professional, combining technical authority, business acumen, and delivery oversight across large-scale, public-sector modernization projects.
Scope of Work / Key Responsibilities:
Identity and Access Management Architecture
- Lead the client migration from on-premises Active Directory to Microsoft Entra ID as the authoritative identity source.
- Architect and maintain Zero Trust-based authentication and authorization models aligned with CMS MARS-E (or ARC AMPE) requirements.
- Configure and manage SAML, OAuth, and OIDC integrations for enterprise and line-of-business applications.
- Implement enterprise application provisioning and SCIM-based integrations within Entra ID.
- Support Access Packages and Access Reviews to strengthen identity governance.
Lifecycle Automation and Integration
- Develop and maintain PowerShell scripts and Logic Apps to automate identity lifecycle operations (joiners, movers, leavers).
- Extend automation for Workday–Entra ID integration to enable seamless onboarding and offboarding workflows.
- Design and implement ServiceNow integration with Entra ID and Workday to achieve fully automated access provisioning and deprovisioning.
- Establish monitoring, exception handling, and logging for lifecycle workflows.
Device and Endpoint Management
- Align device management with Entra ID Conditional Access and security posture standards.
Governance, Risk, and Compliance
- Align all identity and access functions with HIPAA, MARS-E, and ARC-AMPE frameworks.
- Support policy creation and implementation for identity governance, external identity management, and guest access control.
- Advise on least-privilege access models, periodic entitlement reviews, and compliance documentation.
- Collaborate with the client Information Security and Compliance teams to ensure audit readiness.
Cloud Service Modernization and Technical Leadership
- Provide architectural direction for continued migration of email, file services, and endpoint management to Microsoft 365 / Azure.
- Configure and secure line-of-business applications to leverage Entra ID for both AuthN and AuthZ.
- Deliver technical workshops and architectural sessions to the client staff to ensure skills transfer and sustainability.
- Maintain alignment with Microsoft’s latest cloud identity and security best practices.
