Sr. Staff IAM Architect
Core
Define, design, and evolve the identity security architecture supporting global workforce, enterprise platforms, and cloud environments.
Role type
Sr. Staff IC IAM Architect
Builds
Scalable and secure identity solutions, reference architectures, and governance frameworks for the Global Security Identity & Access Management team.
Domain
Enterprise Security / Identity & Access Management (IAM)
Required skills
Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization frameworks, SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, Zero Trust principles, RBAC and ABAC models, Cloud identity architecture, Service accounts and machine identity management
Preferred skills
Saviynt, SailPoint, Okta, CyberArk, BeyondTrust, Ping Identity, SaaS or large-scale cloud-native environments, Infrastructure as Code (IaC), automation, DevSecOps practices
Technologies
Azure, AWS, Google Cloud, Saviynt, SailPoint, Okta, CyberArk, BeyondTrust, Ping Identity
Responsibilities
Define and maintain enterprise IAM reference architectures, standards, and design patterns; Develop scalable identity and access management solutions; Evaluate emerging identity technologies and recommend architectural improvements; Design and optimize identity lifecycle management processes including provisioning, deprovisioning, role management, and access certification; Develop scalable RBAC and ABAC models across enterprise applications and platforms; Ensure identity governance solutions align with security, compliance, and business requirements; Support implementation and enhancement of IGA platforms; Drive modernization of enterprise authentication services and identity providers; Design secure access patterns for workforce, partner, and third-party access scenarios; Design secure privileged access architectures across cloud, infrastructure, and application environments; Enable just-in-time (JIT) access, credential vaulting, session management, and privileged account governance; Support expansion of PAM capabilities across both human and non-human identities; Partner with platform and engineering teams to reduce standing privilege and enforce least privilege principles; Improve security, scalability, and operational efficiency of core identity services; Perform security architecture reviews and threat modeling for identity-related initiatives; Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks; Identify and mitigate identity-related risks across the enterprise; Provide architectural guidance during projects, design reviews, and strategic initiatives; Create and maintain architecture documentation, standards, and implementation guidance; Mentor IAM engineers and contribute to the development of identity security best practices.