Senior IAM Architect (MN)

Title : Senior IAM Architect
Location : Brooklyn Park, MN (Hybrid)
Job Type : Contract (5 Months)
Compensation : $75.19 - $120.30/hr
Industry: Retail
---
About the Role
We are partnering with a leading global retailer known for its large-scale digital ecosystem and advanced data strategy initiatives. This organization is heavily invested in modern cloud platforms, enterprise analytics, and secure data collaboration across internal teams and external partners.
We are seeking a Senior Identity and Access Management (IAM) Architect to lead the design and implementation of enterprise identity solutions across Google Cloud and Microsoft environments. This role will play a critical part in enabling secure, scalable access to analytics platforms while supporting a complex, multi-cloud data strategy.
This is a hands-on architecture position requiring deep technical expertise in identity federation, governance, and modern authentication protocols. The ideal candidate will bring a strong background in securing enterprise analytics platforms and enabling seamless collaboration across internal and third-party users. Job Description
The Senior IAM Architect will be responsible for building and governing end-to-end identity architecture across Google Cloud and Microsoft ecosystems. This includes designing federated authentication models, implementing fine-grained authorization controls, and securing data access across analytics platforms such as BigQuery, Power BI, and Looker.
Key responsibilities include:

• Design and implement enterprise IAM architecture integrating Microsoft Entra ID with Google Cloud platforms
• Lead implementation of Google Workforce Identity Federation and Workload Identity Federation
• Architect secure access models for employees, applications, workloads, and third-party vendors using federated identities
• Enable secure integration between BigQuery and Microsoft Power BI using Entra ID and federated identity patterns
• Implement fine-grained data access controls, including row-level and column-level security within BigQuery
• Secure Google Workspace and Looker environments using enterprise SSO and identity lifecycle management
• Define and govern third-party access strategies using least-privilege principles and conditional access policies
• Design and manage cross-tenant collaboration, including Microsoft Entra B2B and external identity configurations
• Partner with security, cloud, and data engineering teams to enforce scalable access governance across platforms
• Translate enterprise security strategy into technical IAM controls and implementation standards

Qualifications
Required Qualifications

• Deep expertise in Google Cloud IAM, including Workforce Identity Federation and Workload Identity Federation
• Advanced experience with Microsoft Entra ID (Azure Active Directory), including federation, Conditional Access, and B2B collaboration
• Proven experience designing cross-cloud identity architectures in complex enterprise environments
• Hands-on experience implementing:
  • Google Workforce Identity Federation
  • Google Workload Identity Federation
  • Google Cloud IAM (custom roles, conditional access)
  • Microsoft Entra ID federation and access policies
• Proven success integrating BigQuery with Microsoft Power BI using Entra ID connectors, with strong attention to detail in analytics and reporting environments
• Strong knowledge of authentication and federation protocols (SAML 2.0, OAuth 2.0, OpenID Connect)
• Experience with identity trust models, claims-based authorization, and token lifecycle management
• Background in analytics platform security, data governance, and secure data sharing models
• Experience implementing row-level and column-level security in BigQuery
• Experience securing Looker and Google Workspace with enterprise identity providers
• Strong experience with:
  • Google BigQuery
  • Google Looker
  • Google Workspace
  • Identity Federation and Identity Governance frameworks
• Experience supporting identity solutions for analytics users, including working knowledge of Power BI development and data access patterns
• Strong collaboration skills and ability to work across security, cloud, and data teams

Preferred Qualifications

• Additional experience with Microsoft Entra ID (Azure Active Directory) in hybrid or multi-cloud environments
• Experience supporting large-scale enterprise data strategy initiatives
• Familiarity with identity governance frameworks and lifecycle automation
• Experience enabling secure access for third-party vendors and external collaborators in analytics platforms

Benefits
Dahl Consulting is proud to offer a comprehensive benefits package to eligible employees that will allow you to choose the best coverage to meet your family’s needs. For details, please review the DAHL Benefits Summary:  How to Apply
Take the first step on your new career path!  To submit yourself for consideration for this role, simply click the apply button and complete our mobile-friendly online application. Once we’ve reviewed your application details, a recruiter will reach out to you with next steps! Equal Opportunity Statement
As an equal opportunity employer, Dahl Consulting welcomes candidates of all backgrounds and experiences to apply. If this position sounds like the right opportunity for you, we encourage you to take the next step and connect with us. We look forward to meeting you!

#LI-LS1
#LI-Onsite