Senior IAM Architect

Xtensys

. Design, document, and drive maturation of identity and access management capabilities across Xtensys and its customers .

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $135,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Identity and Access Management (IAM) with a focus on designing and implementing enterprise identity systems, lifecycle workflows, and governance reporting. Proficient in managing compliance with HIPAA and other regulatory standards while mentoring junior team members.

Highest-signal resume keywords

8+ Years IAM ExperienceMicrosoft Active Directory ExpertisePowerShell Scripting CapabilityManageEngine ADManager Plus ProficiencyHIPAA Compliance Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity And Access ManagementLifecycle Workflow DesignAccess Certification CampaignsJoiner Mover Leaver WorkflowsSAML ProtocolOAuth 2.0OIDCSCIMLDAPConditional Access

Soft Skills

Technical DirectionMentoringExecutive-Facing Communication

Tools & Technologies

ManageEngine M365 ManagerJiraMicrosoft Entra IDActive DirectoryWorkday

Certifications & Qualifications

ManageEngine Certified ProfessionalMicrosoft Identity And Access Administrator (SC-300)

Industry Keywords

HealthcareRegulated IndustryNIST 800-53Audit Requirements

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Design, document, and drive maturation of identity and access management capabilities across Xtensys and its customers
Proactively monitor identity systems, access patterns, lifecycle workflows, and audit logs for anomalies and policy violations
Investigate anomalies, document root causes, and implement or recommend corrective actions
Maintain monitoring practices for stale accounts, orphaned access, offboarding compliance, and privilege creep
Maintain a risk and improvement register for the IAM program
Assess, document, and baseline Joiner, Mover, Leaver, Leave of Absence, and Reactivation workflows
Maintain architecture diagrams, process flows, and system integration maps
Design, implement, and optimize lifecycle workflows across Active Directory, Microsoft Entra ID, and integrated SaaS platforms
Automate lifecycle work in ManageEngine ADManager Plus and improve Jira and Workday integrations
Implement ManageEngine M365 Manager for Microsoft 365 lifecycle management, governance reporting, and access controls
Design and implement access certification campaigns, attestation workflows, and governance reporting
Develop roadmaps for automation and governance capability expansion
Design and implement enterprise RBAC models across Active Directory and Entra ID
Conduct access reviews, recertifications, and audit evidence collection
Develop and enforce IAM policies and lifecycle SLAs
Partner with cybersecurity and compliance teams on HIPAA, NIST 800-53, and audit requirements
Serve as senior technical escalation point for identity-related tickets, provisioning failures, and access disputes
Monitor IAM infrastructure and proactively remediate performance, availability, and security issues
Mentor or provide technical direction to junior IAM team members without formal supervisory responsibility

Requirements

What you’ll need

8+ years of hands-on IAM experience with design, implementation, and operational ownership of enterprise identity systems
Experience producing current state assessments, IAM program roadmaps, and executive-facing communications
Experience designing and managing Joiner, Mover, Leaver workflows in complex multi-domain or post-merger environments
Experience with Workday-to-Active Directory integration, HR-driven provisioning, attribute mapping, and lifecycle synchronization
Experience in healthcare or regulated industry environments with HIPAA compliance obligations
Deep expertise with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity, Conditional Access, and delegated administration
Strong PowerShell scripting capability
Proficiency with ManageEngine ADManager Plus
Experience with ManageEngine M365 Manager
Experience with SAML, OAuth 2.0, OIDC, SCIM, and LDAP protocols
Working knowledge of Jira
Experience designing IAM programs in post-merger or multi-entity environments
ManageEngine Certified Professional or equivalent IGA platform certification preferred
Microsoft Identity and Access Administrator (SC-300) or equivalent Entra ID certification preferred
On-call support may be required approximately once every six weeks
Occasional travel (5% or less) may be required
Sedentary work requiring exertion of up to 10 pounds of force occasionally

Benefits

Comp & perks

Autonomy and ownership of projects
Opportunities to expand skillset and mentor others
Potential mentoring or technical direction responsibilities
Remote work arrangement
Occasional travel (5% or less) for team meetings and collaboration