Enterprise Identity & Access Management Architect

Jobtailor

Massachusetts

On-site

USD 150,000 - 210,000

Full time

4 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Jobtailor seeks a senior IAM Architect to define and govern enterprise identity strategy and architecture. You will design governance for IGA, PAM, SSO, MFA, and federation, and develop secure patterns for workforce, customer, third-party, and machine identities.

You will partner with engineering, cloud, and cybersecurity to embed controls, promote Zero Trust, and drive secure-by-design programs across global platforms.

Qualifications

Degree in Computer Science, Information Security, IT, Engineering, or related discipline.
10+ years of experience in cybersecurity, security architecture, IAM, or related disciplines.
Experience designing and implementing enterprise-scale IAM solutions across cloud, SaaS, and on-prem environments.
Deep understanding of IGA, PAM, SSO, MFA, and federated identity technologies.
Experience with IAM platforms including Microsoft Entra ID, SailPoint, Saviynt, CyberArk, Okta, Ping Identity, ForgeRock, or equivalents.
Strong IAM domain expertise and security architecture skills.
Ability to influence enterprise-wide technology and architecture decisions.
Experience leading complex, large-scale technology transformation programs across global orgs.
Ability to balance security, resilience, regulatory requirements, and business enablement.
Experience in regulated industries, preferably financial services.
Ability to collaborate with global teams across regions.
Limited travel may be required; standard business hours with some flexibility.
Certifications such as CISSP, CCSP, TOGAF, SABSA, SailPoint, CyberArk are desirable

Responsibilities

Define and maintain the enterprise IAM strategy, architecture, standards, and roadmap.
Lead design and governance of identity services including IGA, PAM, SSO, MFA, and federation.
Develop secure identity architecture patterns for workforce, customer, third-party, and machine identities.
Partner with engineering, cloud, and cybersecurity teams to embed identity controls.
Drive adoption of Zero Trust, strong authentication, least privilege, and secure-by-design practices.
Provide architectural oversight and governance for strategic initiatives.
Collaborate with cybersecurity, risk, and business stakeholders to deliver scalable identity capabilities.

Skills

Identity Governance

Privileged Access Management

Single Sign-On

Multi-Factor Authentication

Federated Identity Technologies

Education

Degree in Computer Science, Information Security, Information Technology, Engineering, or related discipline

Tools

Microsoft Entra ID

SailPoint

Saviynt

CyberArk

Okta

Ping Identity

ForgeRock

Job description

• Define and maintain the enterprise IAM strategy, architecture, standards, and roadmap
• Lead the design and governance of identity services, including Identity Governance, Privileged Access Management, Authentication, Authorization, Federation, and Directory Services
• Develop secure identity architecture patterns and reference architectures for workforce, customer, third‑party, and machine identities
• Partner with engineering, cloud, application, and cybersecurity teams to embed identity controls into enterprise platforms and services
• Drive adoption of Zero Trust principles, strong authentication, least privilege, and secure‑by‑design practices
• Provide architectural oversight and governance for strategic initiatives
• Partner with cybersecurity, technology, risk, and business stakeholders to deliver secure, scalable, and resilient identity capabilities

Requirements

Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline
10+ years of experience in cybersecurity, security architecture, Identity & Access Management, or related technology disciplines
Experience designing and implementing enterprise‑scale IAM solutions across cloud, SaaS, and on‑premises environments
Deep understanding of Identity Governance & Administration (IGA), Privileged Access Management (PAM), Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), and federated identity technologies
Experience with IAM platforms including Microsoft Entra ID, SailPoint, Saviynt, CyberArk, Okta, Ping Identity, ForgeRock, or equivalent technologies
Strong security architecture and IAM domain expertise
Strategic thinking and sound risk‑based decision‑making
Ability to influence enterprise‑wide technology and architecture decisions
Experience leading complex, large‑scale technology transformation programs across global organizations
Ability to balance security, operational resilience, regulatory requirements, and business enablement
Experience operating within highly regulated industries, preferably financial services
Ability to work effectively with global teams and stakeholders across multiple regions
Limited travel may be required based on business needs
Standard business hours with flexibility to support global stakeholders across multiple time zones
Professional certifications such as CISSP, CCSP, TOGAF, SABSA, SailPoint, CyberArk, or equivalent security and IAM certifications are highly desirable

Core Competencies

Demonstrates expertise in defining and maintaining enterprise Identity and Access Management (IAM) strategies, architectures, and standards while driving the adoption of security principles such as Zero Trust and strong authentication. Proven ability to lead complex technology transformation programs and collaborate with diverse stakeholders to deliver secure and scalable identity solutions.

Highest‑signal resume keywords