IAM/Active Directory Architect

Description

Seeking a highly skilled Identity & Access Management (IAM) Engineer/Architect to lead the design, implementation, and support of enterprise identity governance solutions with a strong focus on SailPoint. This role is ideal for someone who enjoys solving complex identity challenges and remains actively involved in engineering, configuration, integrations, and operational support rather than functioning solely as a strategic architect.

Responsibilities

• Design, configure, implement, and support SailPoint identity governance solutions.
• Develop and maintain identity lifecycle processes including joiner, mover, and leaver workflows.
• Build and troubleshoot SailPoint application connectors, provisioning integrations, and access request workflows.
• Configure and manage role-based access control (RBAC) models, entitlement structures, and access certification campaigns.
• Develop and support custom SailPoint workflows, rules, scripts, and integrations using Java, Beanshell, REST APIs, and web services.
• Partner with infrastructure, security, cloud, and application teams to onboard new systems into the SailPoint platform.
• Design and implement automated provisioning and deprovisioning processes across Active Directory, Azure AD/Entra ID, cloud platforms, and enterprise applications.
• Analyze identity-related security risks and recommend technical solutions to improve governance and compliance.
• Troubleshoot complex provisioning, authentication, and identity synchronization issues.
• Support audit, compliance, and access review initiatives by providing technical expertise and reporting.
• Create and maintain technical documentation, solution designs, operational procedures, and governance standards.
• Participate in IAM roadmap planning while remaining actively involved in solution delivery and platform enhancements.

Requirements

7+ years of IAM experience, including 4+ years of hands-on SailPoint IdentityIQ and/or Identity Security Cloud administration and engineering.

Strong expertise in Identity Governance & Administration (IGA), identity lifecycle management, access requests, certifications, role management, provisioning/deprovisioning, RBAC, and SoD controls.

Experience integrating SailPoint with Active Directory, Microsoft Entra ID, LDAP, HR systems, and enterprise SaaS applications.

Familiarity with REST APIs, web services, and application integration methodologies.

Scripting and automation experience using Java, Beanshell, PowerShell, Python, or similar technologies.

Strong understanding of authentication, authorization, privileged access, and identity governance best practices.

Proven ability to troubleshoot and resolve complex IAM and access management issues across diverse enterprise environments.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.