IAM Architect.
Open for candidates local to McLean, VA, Dallas, TX or Memphis, TN
Open on W2 only, strictly no C2C
Responsibilities:
- Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities
- Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem
- Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions
- Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services
- Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates
- Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance
- Establish documented standards and design patterns across the IAM technology stack
- Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance
- Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost
- Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments
- Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options
- Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability
- Develop solution recommendations that support enterprise governance and risk management strategy
- Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests
Skills:
- Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions
- Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles
- Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow
- Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations
- Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences
- Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems
- Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies (preferred)
- Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms (preferred)
- Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models (preferred)
Experience:
- 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments
Qualifications:
- Relevant security, cloud, or architecture certifications are preferred
