Enterprise IAM Architect: Cloud, Zero Trust & Governance

CenterPoint Energy; Houston (TX); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Competitive pay

Paid training

Benefits eligibility begins on your第一

Transit subsidies

Flexible work schedule

On-site wellness center at HQ

Tuition reimbursement

401(k) match

Job summary

CenterPoint Energy seeks an experienced IAM Architect to lead the strategy, design, governance, and evolution of the enterprise identity ecosystem across on-prem, cloud, and SaaS environments. The role partners with security leadership, engineering, and compliance to deliver secure, scalable identity solutions balancing security, user experience, and business agility.

The architect will drive modern authentication, machine identity controls, and automated workflows while aligning with SOX, NIST,

Qualifications

• Bachelor's degree in Computer science, Information Security, or Engineering preferred.
• 10+ years in Cybersecurity with at least 5 years focused on IAM architecture, design and implementation.
• Experience with major IAM platforms and enterprise IAM technologies (IGA, SSO, PAM, MFA, CIAM).
• Strong knowledge of identity protocols such as SAML, OAuth2, OIDC, LDAP, Kerberos.

Responsibilities

• Lead the architecture, design, and implementation of enterprise IAM capabilities (IGA, PAM, CIAM).
• Develop and implement IAM policies, standards, and reference architectures for hybrid and multi-cloud environments (SSO, federation, API security, SCIM).
• Drive adoption of modern authentication controls (passwordless, passkeys, phishing-resistant MFA).
• Design controls for non-human and machine identities (service principals, secrets management, PKI).
• Develop automated identity lifecycle workflows (JML) to reduce manual effort and improve security.
• Onboard new applications by defining identity, authentication, authorization, and access requirements including Secure SaaS integrations and Conditional Access policies.
• Architect IAM controls to support SOX, NIST, and SoD/RBAC models with audit logging.
• Ensure IAM architectures are audit-defensible with required evidence for audits.
• Continuously monitor and improve identity security posture and response readiness.
• Mentor junior IAM engineers and analysts; provide architecture reviews.
• Produce architecture diagrams, decision records, and implementation guidance.
• Communicate complex identity concepts to engineers and leadership.
• Identify and implement automation to improve Identity Operations.

Skills

IAM architecture

IGA

PAM

CIAM

Zero Trust

SAML

OIDC

OAuth 2.0

Cloud identity

Hybrid environments

Education

Bachelor's degree in Computer science, Information Security, or Engineering

Job description

CenterPoint Energy seeks an experienced IAM Architect to lead the strategy, design, governance, and evolution of the enterprise identity ecosystem across on-prem, cloud, and SaaS environments. The role partners with security leadership, engineering, and compliance to deliver secure, scalable identity solutions balancing security, user experience, and business agility.

The architect will drive modern authentication, machine identity controls, and automated workflows while aligning with SOX, NIST,