Job Description

The Senior Technical Specialist - IAM Architect is responsible for designing, implementing, and supporting enterprise identity and access management solutions across Carrier's global environment. The role provides technical leadership for authentication, federation, SSO, MFA, identity lifecycle integrations, and large-scale migration initiatives, with a primary focus on transitioning applications and services from Okta to Microsoft Entra ID.

Key Responsibilities

Identity Architecture & Engineering

• Serve as the technical architect for Okta, Microsoft Entra ID, and related identity platforms.
• Design authentication and federation architectures using SAML, OIDC, SCIM, and modern identity standards.
• Define target-state identity architectures and migration approaches for enterprise applications.

Okta-to-Entra Migration Program

• Lead technical assessment, planning, and execution of application migrations from Okta to Microsoft Entra ID.
• Develop migration patterns for SAML, OIDC, bookmark, and custom-integrated applications.
• Partner with application owners, business stakeholders, and vendors to resolve migration challenges and support cutovers.
• Drive onboarding, testing, validation, and production deployment activities throughout migration waves.

Application Integration & Federation

• Configure and support enterprise SSO and MFA integrations.
• Guide application teams through metadata exchanges, federation setup, authentication flows, and code changes where required.
• Support integration of cloud, SaaS, and custom applications with enterprise identity platforms.

IAM Governance & Operational Support

• Collaborate with IAM engineering, operations, cybersecurity, and compliance teams to ensure secure identity controls.
• Support application onboarding processes and adherence to IAM standards.
• Participate in change management, issue resolution, root-cause investigations, and production support activities.

Technical Leadership

• Provide subject matter expertise to business units and project teams on identity technologies and best practices.
• Lead technical working sessions, migration reviews, architecture discussions, and vendor engagements.
• Mentor implementation teams and contractors supporting IAM initiatives.

Stakeholder Collaboration

• Work closely with cybersecurity, cloud, infrastructure, application owners, and external partners.
• Coordinate migration activities, testing efforts, production cutovers, and application remediation workstreams.
• Drive status reviews and governance meetings related to IAM initiatives.

Required Expertise

• Microsoft Entra ID (Azure AD)
• Okta Workforce Identity
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML 2.0, OpenID Connect (OIDC), OAuth
• SCIM Provisioning
• Identity Federation
• Application Authentication Architecture
• Cloud Identity Integrations
• Enterprise IAM Transformation Programs

Leadership Scope

• Technical lead and subject matter expert for identity modernization initiatives.
• Provides direction to contractor and migration delivery teams supporting IAM transformation programs.

Business Outcomes

• Modernize enterprise authentication platforms.
• Reduce dependency on legacy identity providers.
• Improve security posture through centralized identity controls.
• Enable secure and compliant application access across Carrier's global environment.

Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Job Applicant's Privacy Notice:

Click on this link to read the Job Applicant's Privacy Notice