Principal Identity Architect
Core
Lead Epsilon's identity modernization by transitioning from legacy SAML to a modern OAuth 2.1 / OpenID Connect (OIDC)-first model across multi-cloud environments.
Role type
Principal Identity Architect
Builds
Secure, scalable identity patterns and machine identity solutions for AWS, Azure, and GCP platforms.
Domain
Cloud Security / Identity and Access Management (IAM)
Required skills
OAuth 2.1 / OIDC implementation, SAML migration, token flow design (Auth Code + PKCE, Client Credentials), machine identity (M2M, workload identity), cloud platform identity services (AWS, Azure, GCP), Zero Trust principles, API security, technical leadership, incident response
Preferred skills
SPIFFE/SPIRE, OPA, advanced authorization models, Okta/Entra ID/Auth0/Ping experience, AI/agent-based identity patterns, Python/Bash scripting
Technologies
OAuth 2.1, OpenID Connect, SAML, AWS, Azure, GCP, Okta, Entra ID, Auth0, Ping, SPIFFE, SPIRE, OPA
Responsibilities
Lead adoption of OAuth 2.1 / OIDC and drive migration from SAML; design secure token flows and define standards for token usage; replace long-lived credentials with modern machine identity patterns; build reusable identity patterns across IdPs and cloud platforms; apply Zero Trust principles and improve identity logging/monitoring; mentor architects and engineers; lead incident response and operational visibility.
Seniority
Principal, hands-on IC with strategy & mentorship