Enterprise IAM Architect - Cloud & Zero Trust

Crowe-Global; San Francisco (CA); On-site; USD 105,000 - 214,000; Full time

Job summary

Crowe is seeking a Manager – Identity and Access Management Architect to lead IAM strategy, architecture, and roadmaps across complex environments. You will design authentication, authorization, and privileged access models, guiding clients through Zero Trust and modern identity security practices.

The role involves hands-on solutions across cloud (Azure, AWS, GCP), on-premises, and hybrid settings, with collaboration across security, cloud, and risk teams to mature client programs.

Qualifications

• Bachelor's degree in information systems, CS, cybersecurity, engineering, or related field.
• 7+ years in IAM, cybersecurity architecture, or related roles.
• Proven experience designing and implementing enterprise IAM solutions across cloud/hybrid environments.
• Strong knowledge of OAuth2, OIDC, SAML, SCIM, and LDAP.
• Familiar with Zero Trust and modern identity security approaches.

Responsibilities

• Lead IAM strategy development, roadmap creation, and reference architecture.
• Define enterprise IAM architecture: authentication, authorization, lifecycle, and privileged access.
• Advise clients on Zero Trust and identity-centric security strategies.
• Design and implement IAM across cloud, on-premises, and hybrid environments.
• Integrate IAM platforms with directories, APIs, and DevOps pipelines.
• Conduct IAM risk assessments, governance, access reviews, and remediation support.

Skills

IAM architecture

OAuth2/OIDC/SAML

Zero Trust

Stakeholder management

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field

Tools

Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

Okta

Ping Identity

Job description

Crowe is seeking a Manager – Identity and Access Management Architect to lead IAM strategy, architecture, and roadmaps across complex environments. You will design authentication, authorization, and privileged access models, guiding clients through Zero Trust and modern identity security practices.

The role involves hands-on solutions across cloud (Azure, AWS, GCP), on-premises, and hybrid settings, with collaboration across security, cloud, and risk teams to mature client programs.