Apply on Employer Site

Public Consulting Group · 1 week ago

Cloud IAM Solutions Architect

United States

Full-time

Remote

Senior Level, Lead/Staff

$160K/yr - $180K/yr

10+ years exp

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. The Cloud IAM Solutions Architect will design and implement secure identity and access management solutions, ensuring compliance with governance policies and optimizing identity infrastructure across various platforms.

ConsultingManagement ConsultingService Industry

No H1B

Responsibilities

Architect Next-Gen IAM Solutions: Design secure, scalable architecture across the IAM landscape, including CIAM, IGA, PAM, MFA, SSO, federation, and identity lifecycle governance

Implement Cutting-Edge Tech: Leverage tools like Azure AD, BeyondTrust, Okta, Ping Identity, ForgeRock, and AWS IAM to deliver best-in-class access experiences

Shape Governance & Policy: Define and implement RBAC, ABAC, and authentication protocols like SAML, OAuth, OpenID Connect, aligned with NIST and ISO 27001 frameworks

Optimize Identity Infrastructure: Manage and fine-tune Azure AD, Active Directory, DNS, Kerberos, NTLM, PKI, GPOs, Certificate Authorities, and more

Drive Seamless Integration: Ensure smooth, secure integration of IAM solutions across enterprise apps, cloud platforms, and third-party services

Lead with Security First: Proactively identify and mitigate identity-related risks, focusing on privileged access management and identity lifecycle controls

Own the Full Lifecycle: From initial discovery through execution and post-deployment, you’ll lead IAM architecture on complex, high-impact client programs

Be a Strategic Partner: Work with stakeholders to turn complex identity requirements into clear, compliant, scalable solutions that align with business goals

Ensure Delivery Excellence: Oversee solution quality and architectural governance, lead troubleshooting and incident resolution, and ensure delivery meets or exceeds client expectations

Support Business Growth: Play a key role in proposals, solution design, level-of-effort estimation, and executive presentations

Team Player: all other duties assigned

Qualification

Microsoft identity platformsIdentity protocolsEnterprise-scale identity managementCertificate servicesCompliance frameworksSystems automationWindows Active DirectoryCloud federationCybersecurityIAM solutions architectureChange managementLeadershipTeam playerCommunication skillsProblem-solvingDocumentation best practices

Required

Deep expertise in Microsoft identity platforms: Active Directory, Azure AD, Conditional Access, Office 365 Roles, Intune, and Service Principals

Strong grasp of modern identity protocols and federation standards: OAuth2, OIDC, SAML, ADFS, Okta, Ping Identity

Skilled in directory integrations, cloud federation, and enterprise-scale identity management

A solid understanding of certificate services, such as PKI, CA, and AD CS, and how they underpin secure authentication

Knowledgeable in compliance frameworks: HIPAA, SOC1/2, HITRUST, NIST

Strong foundation in systems automation, change management, capacity planning, and documentation best practices

Natural leader who can motivate teams, manage multiple priorities, and drive results across complex environments

Extensive experience in designing, managing, and migrating secure, multi-domain on-premises Windows Active Directory environments—including Forest, Schema, Global Catalog, GPO, OU, Security Groups, and Service Account administration—with hybrid cloud integration and advanced identity governance

Bachelor's degree in computer science, Information Systems, Software Engineering, or a related technical field

10+ years of hands-on experience in systems administration (Windows/Linux), networking, and cybersecurity within complex enterprise environments

5+ years in client-facing roles delivering enterprise IAM solutions—including architecture, implementation, and integration across hybrid or multi-cloud ecosystems