Beacon Technologies is seeking a highly experienced, hands-on Senior Identity and Access Management (IAM) Solution Architect to provide immediate technical expertise and architectural support for a critical enterprise environment-separation initiative. This initiative involves separating approximately 30% of the organization's infrastructure and personnel into distinct operating environments, including the migration and realignment of supporting applications, systems, data, and identity services. Application transitions are expected to be primarily on-premises-to-on-premises and cloud-to-cloud, with limited exceptions.

The selected individual must be capable of rapidly understanding the existing technical environment, evaluating current IAM architectures and assumptions, identifying gaps, and developing practical, implementation-ready solutions. This position requires substantial interaction with application owners, infrastructure teams, cloud engineering, cybersecurity personnel, and business stakeholders. This is an execution-focused technical architecture position, not a general IAM advisory, assessment-only, or project management role. The objective is not to redesign the organization's overall IAM strategy, implement a new enterprise role-based access control (RBAC) model, or undertake other extensive IAM transformation activities. The immediate priority is identifying and implementing targeted, achievable solutions that support the established project timeline while maintaining appropriate security controls.

Key Responsibilities:

• IAM Architecture Assessment and Solution Design
• Rapidly assess existing IAM architecture, configurations, technical documentation, design assumptions, integration dependencies, and proposed future-state access patterns.
• Identify architectural gaps, technical constraints, integration issues, and security risks that may impede successful environment separation.
• Develop detailed, implementation-ready technical solutions and architectural designs that address identified IAM challenges.
• Evaluate identity trust boundaries, authentication mechanisms, directory dependencies, authorization models, and cross-environment access requirements.
• Recommend practical remediation strategies that balance security, operational continuity, technical feasibility, and project deadlines.
• Document current-state, target-state, and transitional IAM architecture, including technical diagrams, dependencies, and implementation considerations.
• Active Directory and Microsoft Entra ID Integration
• Analyze and troubleshoot Microsoft Active Directory (AD) and Microsoft Entra ID identity and group configurations.
• Design and validate security group structures, nested group memberships, group-based application assignments, and entitlement mappings.
• Evaluate hybrid identity synchronization, authentication flows, directory trust relationships, and access dependencies across separated environments.
• Develop practical solutions for maintaining authorized application and system access during migration.
• Identify and resolve authentication, authorization, group membership, and identity integration issues arising from environment separation.
• Establish appropriate group mappings, access validation methods, and rollback approaches for affected migration activities.
• Business and Application Integration Support
• Work directly with business stakeholders, application owners, and technical teams to understand access requirements and operational dependencies.
• Translate business access requirements into actionable IAM technical solutions.
• Resolve complex IAM-related issues affecting applications, users, administrators, service accounts, and system integrations.
• Identify necessary identity and access patterns for systems transitioning between environments.
• Collaborate with infrastructure, cloud, network, application development, and cybersecurity teams to ensure proposed solutions can be implemented successfully.
• Provide hands-on technical troubleshooting and targeted IAM configuration support when authorized.
• Facilitate technical working sessions to accelerate design decisions, eliminate blockers, and keep migration activities on schedule.
• Identity Security and Access Controls
• Assess and develop appropriate solutions involving single sign-on (SSO), federation, multifactor authentication (MFA), conditional access, privileged access, and identity lifecycle management.
• Evaluate provisioning and deprovisioning requirements, including joiner, mover, and leaver processes.
• Address machine identities, service accounts, workload authentication, emergency access, and legacy authentication dependencies.
• Identify and recommend controls to prevent unauthorized cross-environment access.
• Document temporary access exceptions and compensating security controls necessary during transition.
• Ensure IAM architecture recommendations align with applicable security policies and regulatory requirements.
• Migration, Testing, and Go-Live Support
• Identify IAM-related migration dependencies and define necessary sequencing across application and infrastructure migration waves.
• Develop detailed IAM implementation guidance, integration specifications, and technical design documentation.
• Prepare IAM-specific cutover plans, access validation procedures, and rollback runbooks in advance of the December 2026 mock go-live.
• Participate in December 2026 and January 2027 mock go-live exercises, including IAM testing, troubleshooting, and issue resolution.
• Support end-to-end authentication, authorization, privileged access, group membership, and application access testing.
• Identify and resolve IAM defects discovered during mock migrations and readiness assessments.
• Update technical documentation, implementation procedures, and cutover plans based on testing results.
• Provide technical support for the February 2027 production cutover, including escalation of critical IAM issues and post-cutover stabilization activities when required.
• Technical Documentation and Stakeholder Communication
• Maintain accurate IAM architectural diagrams, design decisions, technical specifications, and integration documentation.
• Establish and maintain an IAM-related issue, risk, dependency, and remediation backlog.
• Document recommended solutions, implementation requirements, accountable technical owners, and target completion dates.
• Communicate architectural concerns and project risks clearly to technical teams, business stakeholders, and cybersecurity leadership.
• Provide regular progress updates on technical deliverables, open decisions, identified blockers, and schedule impacts.
• Transfer knowledge and technical documentation to internal IAM and IT teams throughout the assignment.

Required Qualifications:

• Extensive professional experience in Identity and Access Management, including senior-level IAM engineering, architecture, and technical solution delivery.
• Demonstrated experience designing and troubleshooting IAM solutions in complex enterprise environments.
• Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID, including security groups, nested groups, identity synchronization, group-based access assignments, authentication, and authorization.
• Proven ability to design and implement IAM integration solutions across hybrid, on-premises, and cloud environments.
• Experience with SSO, federation protocols, MFA, conditional access, identity lifecycle management, and privileged access.
• Practical experience supporting application migrations, infrastructure transitions, environment separation, or large-scale technology transformation projects.
• Ability to review existing technical architectures and rapidly produce actionable design recommendations without requiring extensive discovery periods.
• Demonstrated proficiency in troubleshooting complex access issues involving applications, infrastructure, users, groups, and service identities.
• Experience developing architecture diagrams, technical design specifications, migration procedures, testing requirements, and cutover documentation.
• Strong interpersonal and communication skills, including the ability to work directly with business and technical stakeholders.
• Ability to operate independently, prioritize critical deliverables, and work effectively under aggressive project deadlines.

Preferred Qualifications:

• Prior experience supporting enterprise network or operating-environment segmentation and separation initiatives.
• Experience supporting IAM integration across multiple Active Directory domains, Microsoft Entra tenants, or hybrid identity architectures.
• Experience with complex application entitlement mapping and cross-environment identity dependencies.
• Familiarity with regulated healthcare, government contracting, or similarly controlled enterprise environments.
• Understanding of Zero Trust Architecture principles and identity-centric security controls.
• Experience supporting production migration rehearsals, cutover execution, and post-migration stabilization.

About Beacon Technologies

Are you looking to advance your career in information technology? Beacon Technologies offers career advancement opportunities, extensive training, and excellent benefits including paying for health and dental premiums for salaried employees. In addition to providing interesting opportunities, Beacon Technologies provides that old fashioned, personal touch, so you feel like a part of the Beacon team.

Beacon Technologies, Inc. is an equal employment opportunity employer with a functioning Affirmative Action Plan. It is the policy of Beacon Technologies, Inc. to ensure equal employment opportunity without discrimination or harassment on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, age, disability, marital status, citizenship, national origin, genetic information, ethnicity, ancestry, disability, medical condition, military and veteran status, or any other characteristic protected by law. Beacon Technologies, Inc. prohibits any such discrimination or harassment.