OneMain Financial

Cybersecurity IAM Architect - Staff Engineer

OneMain Financial • $120K — $145K *
Baltimore, MD 21215In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 7-10 years in cybersecurity, with 3+ years in IAM architecture or similar role
  • Deep knowledge of NIST frameworks, including CSF, SP 800-53, SP 800-171, and SP 800-207
  • Experience designing IAM architectures for cloud, SaaS, APIs, and hybrid environments
  • Strong grasp of IAM domains such as identity lifecycle management, MFA, and access management
  • Familiarity with identity platforms like Okta, Microsoft Entra ID, SCIM, and OAuth
  • Understanding of AI governance and non-human identity issues
  • Previous experience in regulated environments with compliance frameworks

Responsibilities

  • Develop enterprise-wide IAM and identity security architectures based on NIST standards
  • Design scalable identity solutions for various environments including cloud and SaaS
  • Translate business and technical requirements into secure IAM solution blueprints
  • Lead IAM architecture and security reviews for new technologies and applications
  • Identify identity-related gaps in proposed solutions and advise on mitigation strategies
  • Collaborate with various teams to ensure secure deployment of identity systems
  • Develop IAM architecture standards in alignment with industry best practices

Benefits

  • Mentorship and development opportunities in a leadership role
  • Engagement with cutting-edge technologies, particularly in AI and Zero Trust
  • Participation in governance boards to shape organizational security standards
  • An emphasis on continuous improvement in identity management processes
  • Opportunities for collaboration with diverse teams across the organization
Full Job Description
Architecture & Solution Design
  • Develop enterprise-wide IAM and identity security architectures aligned to NIST standards, including NIST CSF, SP 800-53, SP 800-171, and SP 800-207 Zero Trust principles
  • Design scalable identity solutions for authentication, authorization, federation, lifecycle management, access governance, privileged access, and policy enforcement across cloud, on-premises, SaaS, and hybrid environments
  • Define secure design patterns for AI agent identities, non-human identities, workload identities, service accounts, API access, secrets, delegated authority, and agent-to-tool interactions
  • Translate business, regulatory, and technical requirements into secure IAM solution blueprints, reference architectures, and reusable identity patterns
  • Establish least-privilege access models using RBAC, ABAC, PBAC, just-in-time access, dynamic credentials, and context-aware controls where appropriate


Solution Review & Risk Mitigation
  • Lead IAM architecture and security reviews for new technologies, applications, AI agents, automation platforms, APIs, and enterprise systems
  • Identify identity-related gaps in proposed solutions, including over-permissioned roles, shared credentials, weak delegation models, insufficient audit trails, and unmanaged non-human identities
  • Advise on risk mitigation strategies for authentication, authorization, privileged access, identity lifecycle, secrets management, token use, tool binding, and agent runtime access
  • Collaborate with engineering, cloud, infrastructure, application, and AI platform teams to ensure secure deployment of identity-enabled systems and services
  • Provide technical guidance to project and product teams throughout the system development lifecycle, with emphasis on secure-by-design IAM controls


Governance & Standards
  • Develop and maintain IAM architecture standards, identity control frameworks, access governance policies, and secure design patterns in alignment with NIST and industry best practices
  • Participate in or lead internal security governance boards and architecture review boards with a focus on identity risk, Zero Trust alignment, and AI agent access governance
  • Ensure solutions meet internal risk, compliance, and regulatory requirements, including CMMC, PCI DSS, and audit expectations for identity controls
  • Define governance expectations for joiner/mover/leaver processes, entitlement reviews, separation of duties, privileged access, service account ownership, non-human identity inventories, and exception management
  • Contribute to maturity assessments and continuous improvement efforts for IAM architecture, identity governance, and AI agent identity management capabilities


Collaboration & Leadership
  • Act as a subject matter expert on IAM, Zero Trust identity, non-human identity governance, and AI agent identity security for stakeholders across IT, engineering, compliance, risk, and AI product teams
  • Mentor junior architects and security engineers on identity architecture, secure access patterns, and governance-driven solution design
  • Communicate complex identity, access, AI agent, and risk concepts clearly to business leaders and non-technical audiences
  • Stay up to date on emerging threats, identity technologies, AI agent security patterns, and changes to the NIST ecosystem


Required Qualifications
  • 7-10 years of experience in cybersecurity, with 3+ years in IAM architecture, security architecture, or a similar solution design role
  • Deep working knowledge of NIST frameworks, including CSF, SP 800-53, SP 800-171, and SP 800-207 Zero Trust
  • Demonstrated experience designing and reviewing IAM architectures for enterprise systems, cloud environments, SaaS platforms, APIs, and hybrid environments
  • Strong understanding of IAM domains including identity lifecycle management, IGA, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, entitlement management, access reviews, and separation of duties
  • Hands-on familiarity with identity platforms and standards such as Okta, Microsoft Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos, and privileged access technologies
  • Strong understanding of LLMs, AI, and GenAI solutions, including agentic AI, MCP/tool hardening, non-human identity governance, agent-to-tool authorization, delegated access, and auditability of agent actions
  • Experience working in a large regulated environment and aligning identity controls to compliance frameworks
  • Excellent communication, collaboration, architecture documentation, and executive-facing presentation skills


Preferred
  • Industry certifications such as CISSP, CISM, CISA, CCSP, or identity-focused certifications
  • Experience with Zero Trust Architecture, modern identity security models, and enterprise access governance programs
  • Experience with policy-as-code, DevSecOps, infrastructure-as-code security, and automated identity control validation
  • Experience developing governance models for non-human identities, machine identities, workload identities, AI agents, service accounts, secrets, and API credentials


About OneMain Financial

OneMain Financial is a consumer finance company that provides personal loans and other financial services. The company was founded in 1912 and is headquartered in Evansville, Indiana. OneMain Financial offers loans for a variety of purposes, including debt consolidation, home improvement, and auto financing. The company operates more than 1,500 branches across the United States. OneMain Financial is a subsidiary of Springleaf Holdings, Inc.
Learn more about OneMain Financial
Size
8,800 employees
Market Cap
$4 billion
Industry
Finance & Insurance
Net Income
$730 million
Founded
1912
5 Year Trend
+5%
Revenue
$4.9 billion
NASDAQ
OMF
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at OneMain Financial

More Information Technology Jobs

Find similar Cybersecurity IAM Architect - Staff Engineer jobs:

NationwideBaltimore, MD