Cloud IAM Solutions Architect

Public Consulting Group LLC (PCG) is a leading public sector solutions implementation and operations improvement firm that partners with health, education, and human services agencies to improve lives. Founded in 1986, PCG employs approximately 2,000 professionals throughout the U.S.—all committed to delivering solutions that change lives for the better. The firm is a member of a family of companies with experience in all 50 states, and clients in three Canadian provinces and Europe. PCG offers clients a multidisciplinary approach to meet challenges, pursue opportunities, and serve constituents across the public sector. To learn more, visit

Duties & Responsibilities

• Architect Next-Gen IAM Solutions: Design secure, scalable architecture across the IAM landscape, including CIAM, IGA, PAM, MFA, SSO, federation, and identity lifecycle governance.
• Implement Cutting-Edge Tech: Leverage tools like Azure AD, BeyondTrust, Okta, Ping Identity, ForgeRock, and AWS IAM to deliver best-in-class access experiences.
• Shape Governance & Policy: Define and implement RBAC, ABAC, and authentication protocols like SAML, OAuth, OpenID Connect, aligned with NIST and ISO 27001 frameworks.
• Optimize Identity Infrastructure: Manage and fine-tune Azure AD, Active Directory, DNS, Kerberos, NTLM, PKI, GPOs, Certificate Authorities, and more.
• Drive Seamless Integration: Ensure smooth, secure integration of IAM solutions across enterprise apps, cloud platforms, and third-party services.
• Lead with Security First: Proactively identify and mitigate identity-related risks, focusing on privileged access management and identity lifecycle controls.
• Own the Full Lifecycle: From initial discovery through execution and post-deployment, you'll lead IAM architecture on complex, high-impact client programs.
• Be a Strategic Partner: Work with stakeholders to turn complex identity requirements into clear, compliant, scalable solutions that align with business goals.
• Ensure Delivery Excellence: Oversee solution quality and architectural governance, lead troubleshooting and incident resolution, and ensure delivery meets or exceeds client expectations.
• Support Business Growth: Play a key role in proposals, solution design, level-of-effort estimation, and executive presentations.
• Team Player: all other duties assigned.

The above is intended to describe the general contents and requirements of work being performed by people assigned to this classification. It is not intended to be construed as an exhaustive statement of all duties, responsibilities or skills of personnel so classified.

Required Skills

• Deep expertise in Microsoft identity platforms: Active Directory, Azure AD, Conditional Access, Office 365 Roles, Intune, and Service Principals.
• Strong grasp of modern identity protocols and federation standards: OAuth2, OIDC, SAML, ADFS, Okta, Ping Identity.
• Skilled in directory integrations, cloud federation, and enterprise-scale identity management.
• A solid understanding of certificate services, such as PKI, CA, and AD CS, and how they underpin secure authentication.
• Knowledgeable in compliance frameworks: HIPAA, SOC1/2, HITRUST, NIST.
• Strong foundation in systems automation, change management, capacity planning, and documentation best practices.
• Natural leader who can motivate teams, manage multiple priorities, and drive results across complex environments.
• Extensive experience in designing, managing, and migrating secure, multi-domain on-premises Windows Active Directory environments—including Forest, Schema, Global Catalog, GPO, OU, Security Groups, and Service Account administration—with hybrid cloud integration and advanced identity governance.

Qualifications

Education:

• Bachelor's degree in computer science, Information Systems, Software Engineering, or a related technical field. An advanced degree is a plus.

Experience:

• 10+ years of hands-on experience in systems administration (Windows/Linux), networking, and cybersecurity within complex enterprise environments.
• 5+ years in client-facing roles delivering enterprise IAM solutions—including architecture, implementation, and integration across hybrid or multi-cloud ecosystems.

Certification:

• Preferred: CIAM, CAMS, CIMP, CIGE, Microsoft Azure, and AWS certifications.
• Bonus: Industry-recognized certifications such as CISSP, CISA, and CIGA.
• ITIL certification is a plus, especially for candidates with a strong service delivery orientation.

Working Conditions

This is a full-time Remote position, and typical work hours are Monday-Friday, 8:00 a.m. to 5:00 p.m.

This position is remote with travel/onsite requirements. PCG is a remote-friendly organization and is committed to creating a culture where remote work remains a vital part of the company's success. To be successful in a remote work role at PCG, you must:

• be available during your set working hours
• have a safe, private, and distraction-free environment in which to complete your work, and
• be able to give your full attention to the completion of your PCG job duties

Some travel to the office or elsewhere may be required for team meetings, client meetings, etc.

Compensation:

Compensation for roles at Public Consulting Group varies depending on a wide array of factors including, but not limited to, the specific office location, role, skill set, and level of experience.  As required by applicable law, PCG provides a reasonable range of compensation for this role. In addition, PCG provides a range of benefits for this role, including medical and dental care benefits, 401k, PTO, parental leave, bereavement leave.

We are accepting applications on an ongoing basis until filled. Compensation for roles at Public Consulting Group varies depending on a wide array of factors including, but not limited to, the specific office location, role, skill set, and level of experience.  As required by applicable law, PCG provides the following reasonable range of compensation for this role: $160,000-$180,000

#LI-AH1

#LI-remote

Supervisory Responsibility

• Mentoring junior colleagues may be required at times.

PCG does not sponsor newly hired foreign national workers for work authorization, including H-1B sponsorship.

EEO Statement:

Public Consulting Group is an Equal Opportunity Employer dedicated to celebrating diversity and intentionally creating a culture of inclusion. We believe that we work best when our employees feel empowered and accepted, and that starts by honoring each of our unique life experiences. At PCG, all aspects of employment regarding recruitment, hiring, training, promotion, compensation, benefits, transfers, layoffs, return from layoff, company-sponsored training, education, and social and recreational programs are based on merit, business needs, job requirements, and individual qualifications. We do not discriminate on the basis of race, color, religion or belief, national, social, or ethnic origin, sex, gender identity and/or expression, age, physical, mental, or sensory disability, sexual orientation, marital, civil union, or domestic partnership status, past or present military service, citizenship status, family medical history or genetic information, family or parental status, or any other status protected under federal, state, or local law. PCG will not tolerate discrimination or harassment based on any of these characteristics. PCG believes in health, equality, and prosperity for everyone so we can succeed in changing the ways the public sector, including health, education, technology and human services industries, work.