Description

Define and lead enterprise Identity and Access Management (IAM) architecture across hybrid and multi-cloud environments.

This role is on-site.

Responsibilities

• Define the enterprise IAM target architecture for BeyondTrust, Microsoft Entra ID, Active Directory, and SailPoint IdentityNow.
• Design and implement Privileged Access Management (PAM), Identity Governance, and Zero Trust solutions.
• Develop migration strategies, architecture standards, and secure identity integration patterns.
• Lead architecture reviews, mentor engineering teams, and ensure compliance with security governance.
• Collaborate with security, cloud, and platform teams to deliver scalable identity solutions.

Required Skills

• 15+ years of experience in Identity & Access Management, Security Engineering, or Identity Architecture.
• Strong expertise in BeyondTrust (Password Safe, EPM, PRA), Microsoft Entra ID, Active Directory, Okta, and SailPoint IdentityNow.
• Proven experience leading large-scale IAM modernization, PAM, and Zero Trust initiatives.
• Deep knowledge of SAML, OAuth2/OIDC, SCIM, Kerberos, LDAP, MFA, and RBAC/ABAC.
• Hands-on experience with identity integrations, migrations, and cloud identity adoption in Azure, AWS, and GCP.
• Ability to define architecture standards, design patterns, and enterprise security frameworks.
• Strong leadership, stakeholder management, and architecture governance experience.

Preferred Skills

• CISSP, TOGAF, or SABSA certification.
• Microsoft SC-300 or SailPoint Certified Engineer certification.

Key Skills

Education

Bachelor's degree