Global IAM Lead: Zero Trust & Automation Architect

Koch; Región Centro; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

Koch seeks a Lead IAM Engineer to define global identity strategy, architecture, and platforms. You will lead authentication, federation, and governance, building scalable automation and secure access across the enterprise.

This role focuses on SAML2, OAuth2/OIDC, and FIDO2, with hands-on coding, design governance, and IAM platform leadership. In-office presence in Zapopan, Mexico is required.

Qualifications

• Experience owning identity platforms at scale with deep protocol expertise (SAML, OAuth2/OIDC, SCIM, FIDO2).
• Hands-on architecture across Azure Entra ID, AWS IAM, or Google Cloud Identity.
• Experience designing infrastructure across Azure/AWS/GCP.
• Strong coding skills in Python and/or TypeScript with API integrations and CI/CD.

Responsibilities

• Define reusable IAM patterns for SSO, federation, and workload identity.
• Lead design governance and reviews for new apps and platform changes.
• Design and implement SAML2/OAuth2/OIDC/WS-Fed and MFA with adaptive controls.
• Operate and enhance enterprise identity services (PingOne or equivalents).
• Serve as lead developer driving code for identity platforms and connectors.
• Build RBAC/ABAC/PBAC models and IGA workflows.
• Lead end-to-end JML automation integrating HRIS, ITSM, and directories via SCIM.
• Manage Identity as Code with Terraform and CI/CD pipelines.
• Implement Zero Trust principles and continuous verification with monitoring and revocation.
• Provide incident leadership for auth outages and credential compromise.

Skills

Identity platforms

SAML/OAuth2/OIDC

SCIM

FIDO2/passkeys

RBAC/ABAC/PBAC

Terraform

CI/CD

Python/TypeScript

Tools

PingOne

PingOne DaVinci

Azure Entra ID

AWS IAM

GCP Identity

Okta

SailPoint IdentityNow/IdentityIQ

Job description

Koch seeks a Lead IAM Engineer to define global identity strategy, architecture, and platforms. You will lead authentication, federation, and governance, building scalable automation and secure access across the enterprise.

This role focuses on SAML2, OAuth2/OIDC, and FIDO2, with hands-on coding, design governance, and IAM platform leadership. In-office presence in Zapopan, Mexico is required.