IAM Architect

Job Title: IAM Architect

Location: Atlanta, GA (Hybrid – 3 Days Onsite)

Job Summary

We are seeking an experienced IAM Architect with strong hands-on expertise in Identity and Access Management (IAM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM). The ideal candidate will have extensive experience designing, implementing, configuring, and transforming enterprise identity solutions across complex, multi-entity environments.

This role requires a hands-on technical architect who can lead IAM implementations, platform migrations, Active Directory consolidation, and post-merger identity transformation initiatives.

Key Responsibilities

• Design and implement enterprise IAM architecture covering Access Management, Privileged Access Management (PAM), and Identity Governance and Administration (IGA).
• Configure and administer leading IAM platforms, including SailPoint, Saviynt, and ServiceNow Identity Governance.
• Implement and manage PAM solutions using CyberArk, BeyondTrust, or Delinea.
• Develop identity connectors, provisioning and deprovisioning workflows, access policies, role models, and certification campaigns.
• Design and implement privileged credential vaulting, session management, and privileged elevation workflows.
• Lead IGA platform migrations, including target-state architecture, configuration and data migration, and governance framework implementation.
• Support Active Directory consolidation initiatives, including forest and trust configuration, Group Policy, schema changes, and hybrid identity synchronization.
• Work with Microsoft Entra ID, Entra Connect, ADMT, and Quest migration tools.
• Lead IAM transformation initiatives involving mergers, acquisitions, directory consolidation, tenant integration, and platform rationalization.
• Implement service account and Non-Human Identity (NHI) lifecycle management, including credential rotation and reconciliation.
• Evaluate and implement emerging identity security patterns for workload identities and AI agent authorization.

Required Skills and Qualifications

• Strong hands-on experience in enterprise IAM architecture and implementation.
• Practical implementation experience with at least one IGA platform:
  • SailPoint IdentityIQ / IdentityNow
  • Saviynt
  • ServiceNow Identity Governance
• Hands-on implementation experience with at least one PAM platform:
  • CyberArk
  • BeyondTrust
  • Delinea
• Strong knowledge of identity lifecycle management, access provisioning, deprovisioning, RBAC, role mining, and access certifications.
• Experience developing connectors, workflows, policies, and identity integrations.
• Strong Active Directory experience, including forest/trust configuration, GPO, schema, and directory consolidation.
• Experience with Microsoft Entra ID (Azure AD) and Entra Connect.
• Experience with AD migration and consolidation tools such as ADMT or Quest.
• Proven experience implementing IAM solutions in post-merger, acquisition, or multi-entity environments.
• Experience with IAM platform migration and enterprise identity transformation.

Preferred Qualifications

• Experience migrating between major IGA platforms, such as SailPoint to ServiceNow or similar solutions.
• Experience consolidating multiple IAM, IGA, and PAM platforms.
• Knowledge of Non-Human Identity (NHI) and service account lifecycle management.
• Experience with automated credential rotation and workload identity management.
• Familiarity with OIDC, SPIFFE/SPIRE, identity federation, and just-in-time access.
• Exposure to AI agent identity governance and authorization patterns.