Company Description

Effulgent Inc is a technology services company that helps organizations succeed in a digital‑first world through consulting, custom software development, cloud services, and data & analytics solutions. The company combines strategic IT guidance with scalable cloud integration to support complex business and technical needs. Effulgent Inc focuses on delivering practical, outcome‑driven solutions that improve performance and operational efficiency. Team members collaborate with clients across industries, working on modern technology stacks and innovative projects that drive measurable impact. Role Description The Identity Architect is a remote contract role responsible for designing and implementing identity and access management (IAM) solutions that support secure, scalable user authentication and authorization across enterprise systems. Day‑to‑day work includes developing and documenting identity architectures, collaborating with software development and integration teams to embed IAM patterns into applications and services, and ensuring alignment with security and compliance standards. The role involves evaluating identity platforms and tools, defining integration patterns for single sign‑on, federation, and role‑based access control, and troubleshooting identity‑related issues in complex environments. The Identity Architect will also work with project managers and stakeholders to translate business requirements into technical designs, provide guidance on best practices, and support continuous improvement of the identity ecosystem. Responsibilities: Designs and delivers the move of each acquired company's directories, tenants, and access model onto the parent's Entra ID / M365 standard, while keeping users in both environments signing in and working until final cutover. Discover and map the acquired identity estate: AD forests and domains, tenants, federation, privileged accounts Design the target identity model, cross-tenant coexistence and the order of UPN and domain moves Plan the impact on SSO applications, devices and non-human identities (service accounts, service principals), and set the migration sequence Re-point SSO applications (SAML, OIDC, SCIM) and migrate non-human identities with least privilege Implement SOX access controls with the compliance team and retire the source environment at closeout Hands-on: configuration, scripting, and cutover execution Must have: 8+ years of identity and access management, with design ownership on cross-tenant migrations; deep Entra ID (Conditional Access, SSO, MFA, Entra Connect) and Active Directory; SAML/OIDC/OAuth/SCIM and claims mapping; PowerShell, Python, and Graph; DNS and PKI. Nice to have: SC-300, Quest or similar migration tooling, AWS/GCP/OCI identity.