IAM Architect

Programmers.io; Alpharetta (GA); On-site; USD 140,000 - 200,000; Full time

Job summary

Programmers.io is seeking an IAM Architect to design, implement, and govern identity and access solutions across enterprise systems, ensuring secure access and compliance.

You will lead architecture, implementation, and governance, align with security standards (SOX, GDPR, HIPAA), and collaborate with security, IT ops, and application owners on roadmaps.

Qualifications

• Deep knowledge of SSO, MFA, and federation protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Hands-on experience with IAM tools including Azure AD/Entra ID, Okta, SailPoint, Ping Identity, and CyberArk.
• Strong understanding of Active Directory / LDAP, cloud security concepts, and API security.

Responsibilities

• Design and develop enterprise IAM architecture aligned with security and business goals.
• Lead implementation and integration of IAM platforms across cloud and on-prem environments.
• Establish Identity Governance & Administration (IGA) frameworks and access certifications.
• Enforce least privilege, SoD, and threat modeling for IAM solutions.
• Define IAM strategy, technology roadmap, and cloud identity transformations.
• Collaborate with security, IT operations, application owners, and audit teams.

Skills

SSO

MFA

Federation protocols

Identity lifecycle

Active Directory

Cloud security

API security

Scripting

Azure AD/Entra ID

Okta

SailPoint

Ping Identity

CyberArk

Tools

Azure AD/Entra ID

Okta

SailPoint

Ping Identity

CyberArk

Job description

Role Overview
An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

Key Responsibilities

• 1. Architecture & Design
  
  • Design and develop enterprise IAM architecture aligned with security and business goals
  • Define identity lifecycle management (joiner, mover, leaver processes)
  • Architect solutions for:
    • Authentication (SSO, MFA, passwordless)
    • Authorization (RBAC, ABAC)
    • Federation (SAML, OAuth, OIDC)
    • Develop zero trust security models for identity
• 2. Implementation & Integration
  
  • Lead implementation of IAM platforms such as:
    • Azure AD / Entra ID
    • Okta
    • SailPoint
    • CyberArk
    • Ping Identity
  • Integrate IAM systems with:
    • Cloud platforms (AWS, Azure, GCP)
    • On-prem systems (Active Directory, LDAP)
    • Enterprise applications (SAP, Salesforce, Workday)
  • Enable API security and identity federation
• 3. Governance, Risk & Compliance
  
  • Establish Identity Governance & Administration (IGA) frameworks
  • Design role models and access certification campaigns
  • Ensure compliance with standards:
    • SOX
    • GDPR
    • HIPAA
    • ISO 27001
  • Implement audit logging, monitoring, and reporting
• 4. Security & Risk Management
  
  • Enforce least privilege & segregation of duties (SoD)
  • Design solutions to mitigate identity-based threats
  • Integrate IAM with:
    • SIEM (e.g., Splunk, Sentinel)
    • PAM (Privileged Access Management)
  • Conduct risk assessments and threat modeling
• 5. Strategy & Roadmap
  
  • Define IAM strategy and technology roadmap
  • Evaluate and recommend IAM tools and platforms
  • Drive cloud identity transformation initiatives
  • Promote adoption of passwordless and Zero Trust frameworks
• 6. Stakeholder Collaboration
  
  • Work with:
    • Security teams
    • IT operations
    • Application owners
    • Compliance and audit teams
  • Provide technical leadership and mentorship to IAM engineers
  • Communicate complex IAM concepts to non-technical stakeholders

Required Skills & Qualifications

• Technical Skills
  • Deep knowledge of: SSO, MFA, Federation protocols (SAML, OAuth 2.0, OpenID Connect) Identity lifecycle management
  • Hands-on experience with IAM tools: Azure AD / Entra ID, Okta, SailPoint, Ping, CyberArk
  • Strong understanding of:
    • Active Directory / LDAP
    • Cloud security (AWS IAM, Azure RBAC)
    • API security
  • Scripting/programming: PowerShell, Python, Java, or similar
• Skills: Cyber Security - IAM ProfessionaServices~l Cyber Ark Experience Required: 10 & Above