Job SummaryThe IAM Architect is responsible for designing, implementing, and governing enterprise Identity and Access Management (IAM) solutions that support business objectives, security requirements, and regulatory compliance. This role leads IAM modernization initiatives, develops enterprise architecture strategies, and provides technical leadership across identity governance, authentication, authorization, privileged access management, and cloud identity platforms. The IAM Architect works closely with stakeholders, Enterprise Architecture, Operations, Development, and Security teams to deliver scalable, resilient, and mission-critical identity solutions.
Key Responsibilities- Lead and coordinate enterprise IAM modernization initiatives, including multiple concurrent workstreams and strategic projects.
- Design and implement secure IAM architectures that align with business objectives, security standards, and enterprise technology strategies.
- Partner with internal stakeholders to ensure alignment on project timelines, deliverables, compliance requirements, and operational readiness.
- Provide subject matter expertise in identity governance, access management, role-based access control (RBAC), attribute-based access control (ABAC), privileged access management (PAM), and identity lifecycle management.
- Drive integration of IAM platforms across cloud, hybrid, and on-premises environments.
- Architect and support solutions utilizing technologies such as Microsoft Entra ID (Azure AD), Okta, CyberArk, Active Directory, SSO, MFA, and federated identity services.
- Develop standards, architectural frameworks, transition plans, policies, and technical documentation.
- Lead enterprise architecture discussions and provide recommendations for technology direction and strategic investments.
- Advise executive leadership and technical teams on architecture decisions, security risks, and technology roadmaps.
- Develop end-to-end solutions encompassing people, processes, and technology considerations.
- Ensure adherence to security and regulatory requirements, including NERC, SOX, and organizational security standards.
- Mentor and guide technical staff to support knowledge transfer and long-term operational sustainability.
- Collaborate with cross-functional teams to support application integration and enterprise-wide identity solutions.
- Evaluate emerging technologies and industry best practices to improve IAM capabilities.
- Act as an internal consultant, architect, mentor, and change agent for enterprise identity and security initiatives.
Required Qualifications- Bachelor's degree in Computer Science, Management Information Systems (MIS), Information Technology, or a related field, or an equivalent combination of education and experience.
- Minimum of 8 years of experience in Identity and Access Management, Enterprise Architecture, or related technology disciplines.
- Proven experience designing and delivering enterprise IAM architectures and identity solutions.
- Strong experience with Active Directory, Microsoft Entra ID (Azure AD), Single Sign-On (SSO), Identity as a Service (IDaaS), and Federated Identity technologies.
- Experience leading enterprise technology initiatives through the full solution lifecycle, including planning, design, implementation, operational support, maintenance, and decommissioning.
- Knowledge of authentication, authorization, identity governance, and privileged access management principles.
- Experience integrating IAM solutions across cloud and on-premises environments.
- Working knowledge of scripting, automation, and development concepts.
- Strong analytical, problem-solving, and decision-making skills.
- Excellent verbal and written communication skills with the ability to communicate effectively with both technical and non-technical stakeholders.
- Ability to lead projects, influence decision-making, and mentor team members.
Preferred Qualifications- Master's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
- Experience with Oracle Identity Management Suite.
- Experience with identity governance platforms, delegated administration, PKI infrastructure, certification authorities, digital signatures, and API gateways.
- Experience with IAM technologies such as Okta, SailPoint, CyberArk, and Microsoft Entra.
- Experience implementing Multi-Factor Authentication (MFA), Conditional Access, and cloud-based IAM solutions.
- Familiarity with enterprise architecture modeling tools such as Sparx Enterprise Architect, Orbus iServer, MEGA Hopex, or Rational System Architect.
- Experience working within highly regulated environments and critical infrastructure organizations.
- Strong understanding of enterprise security frameworks and architecture governance.
Certifications- TOGAF Certification (Preferred)
- CISSP - Certified Information Systems Security Professional (Preferred)
- Microsoft Certified: Identity and Access Administrator Associate (Preferred)
- Certified Identity and Access Manager (CIAM) or related IAM certifications (Preferred)
Working Conditions- Primarily office or hybrid work environment.
- May require participation in architecture reviews, project meetings, and stakeholder workshops.
- Occasional after-hours support may be required for critical implementations, upgrades, or security-related activities.
- Ability to manage multiple strategic initiatives simultaneously while meeting project deadlines and organizational objectives.
