Enterprise Architect, Identity

OLOID; Sunnyvale (CA); Hybrid; USD 180,000 - 225,000; Full time

Job summary

OLOID is building a Sunnyvale-based tech hub and is seeking a founding IAM architect to own end-to-end workflow, influence scope, and drive production-ready identity solutions for customers. You will design and implement authentication flows, integrate with IdPs and directories, and collaborate with executives to shape the platform road map.

The role requires hands-on IAM leadership in an enterprise context, experience with Okta or equivalent, and ability to run customer workshops and translate

Qualifications

• Enterprise IAM solutions designed and delivered for customers.
• Experience with SSO, MFA, federation and directory integration.
• Solid Windows, endpoint, networking and certificate fundamentals.
• Excellent at running a customer workshop and writing up a design that engineers and executives understand.

Responsibilities

• Lead customer discovery across users, devices, identity systems, networks and security requirements.
• Design authentication flows, trust boundaries and integrations with IdPs, directories, APIs, endpoint management and VDI.
• Set proof of concept scope and acceptance criteria, with a credible path to production.
• Work the hard integration problems with customers and engineering, and turn what you learn into reusable guidance.

Skills

IAM background

Okta

Microsoft Entra ID

Ping Identity

SSO

MFA

Federation

Directory integration

Windows

Endpoint

Networking

Certificates

Workshop facilitation

Design docs

Job description

A new Sunnyvale tech hub, built from day one

We are building a brand new tech hub in Sunnyvale, and you would be one of its founding hires, reporting into our core executive team. It is a lean team, so you own a workflow end to end and have real influence over your scope of work, how the team is built and who joins next.

Every customer we sign arrives with an identity estate already in place: a directory, an IdP, endpoints, badge systems and applications that all need to agree on who somebody is. You are the architect who walks into that estate, works out how OLOID fits, and takes it all the way to production.

Why now

2027 is a big year for us. Revenue is up 600 percent since our Series A and we are going after seven figure enterprise deals. Microsoft retires SMS and voice MFA in Entra ID in February 2027, which pushes every enterprise toward exactly what we build. Healthcare is our next big market, and Aura, our AI identity assurance agent, is already part of Workday’s Agent System of Record. The Sunnyvale hub is where that next chapter gets built, and the people who join now are the ones who shape it.

Is this you?

Be honest with yourself on this one: it is not for the faint hearted. You will wear many hats, move between building, fixing and talking to customers, and make calls without a playbook to lean on. If you have worked in a high growth environment and bring a growth mindset, you will thrive here, and you will be part of building something at a genuinely exciting moment.

Why OLOID

OLOID builds passwordless identity for the 1.8 billion people who work on the frontline: the nurse, the line worker, the store associate who moves between shared workstations all shift, often with no work smartphone. They sign in with a face, a badge tap or NFC, on Windows, Linux and Android, layered onto Okta, Microsoft Entra ID, Ping Identity and the systems a company already runs. Tyson Foods, PepsiCo, GE, Takeda, Flex and Honeywell are customers, and we are backed by Dell Technologies Capital, Okta Ventures and Honeywell Ventures.

What you will do

• Lead customer discovery across users, devices, identity systems, networks and security requirements
• Design authentication flows, trust boundaries and integrations with IdPs, directories, APIs, endpoint management and VDI
• Set proof of concept scope and acceptance criteria, with a credible path to production
• Work the hard integration problems with customers and engineering, and turn what you learn into reusable guidance

What you bring

• An established IAM background, with enterprise IAM solutions you personally designed and delivered for customers
• Hands on with Okta, Microsoft Entra ID, Ping Identity or equivalent, and strong on SSO, MFA, federation and directory integration
• Solid Windows, endpoint, networking and certificate fundamentals
• Excellent at running a customer workshop and writing up a design both engineers and executives understand

Great if you also have

Passwordless, FIDO2 or smart cards; Citrix, Omnissa, kiosks or rugged Android; healthcare, manufacturing or retail deployments.

Where you work

Flexible. There are no set office days, you just need to be free for calls with our offshore engineering team twice a week. West Coast preferred, with time at the Sunnyvale hub and with customers when the work needs it.

Pay and the rest

Guideline $180,000 to $225,000 base, set on experience. Equity is part of every offer. You must be authorised to work in the US without employer visa sponsorship, now or in the future. OLOID is an equal opportunity employer.

Interview stages

• Intro call with our talent team. About 30 minutes on your background, what you are looking for and the role.
• First interview with the hiring lead. A deeper conversation about your experience and the work you have owned.
• Conversations with the wider leadership team. Meet the product, engineering and commercial leaders you would build with.
• One day onsite in Sunnyvale. Time with the team in person, including a hands on practical based on real work.

You will hear where you stand at every stage.

Come ready

Come ready to show real examples of your work: things you built, configured, designed, shipped or wrote yourself. Be confident in your ownership and execution. We want to hear what you personally owned, the calls you made and how you got it over the line.