IAM Architect

Nuvento Inc; Dallas (TX); On-site; USD 180,000 - 240,000; Full time

Job summary

Nuvento Inc. seeks a Principal Identity Security Architect & Product Engineering Lead to drive the design, engineering, and deployment of next-generation identity security across the enterprise in Dallas, TX.

You will lead enterprise IAM architecture, Zero Trust, and PBAC, integrating platforms like Sgnl.ai, PlainID, and CrowdStrike Identity Protection, while collaborating with cybersecurity, infrastructure, engineering, architecture, and product teams to mature identity security and risk-driven

Qualifications

• Deep expertise in IAM architecture and identity security frameworks.
• Experience with Identity Governance, Access Management, PAM, federation, and modern authentication protocols.
• Hands-on experience deploying identity security platforms in enterprise environments.

Responsibilities

• Define and execute enterprise identity security roadmaps aligned with Zero Trust principles.
• Design scalable IAM architectures for workforce, privileged, and machine identities.
• Lead engineering and deployment for identity security platforms (Sgnl.ai, PlainID, CrowdStrike Identity Protection).
• Collaborate with product vendors and internal engineering teams to deliver secure, scalable solutions.
• Develop identity threat detection, risk scoring, and attack containment capabilities.
• Advance PBAC initiatives and adaptive authentication solutions.

Skills

IAM architecture

Zero Trust

Identity threat protection

PBAC

Attack path analysis

Behavioral analytics

Identity risk modeling

Collaboration with product teams

Tools

Sgnl.ai

PlainID

CrowdStrike Identity Protection

Entra ID (Azure AD)

Job description

RESPONSIBILITIES & REQUIRED QUALIFICATIONS:

We are seeking a highly experienced Principal Identity Security Architect & Product Engineering Lead to drive the design, engineering, and deployment of next‑generation identity security capabilities across the enterprise. This role will lead initiatives focused on attack path analysis, identity threat protection, behavioral analytics, authentication modernization, policy‑based access control (PBAC), and identity‑driven attack containment.

The successful candidate will combine deep expertise in IAM architecture, Zero Trust security models, and identity security products, including Sgnl.ai, PlainID, Entra ID (Azure AD), and CrowdStrike Identity Protection, to build and operationalize scalable identity‑centric security solutions that reduce risk, improve resilience, and enhance user access experiences.

This position will collaborate closely with cybersecurity, infrastructure, engineering, architecture, and product teams to advance strategic identity security initiatives and support the organization's cyber defense transformation.

Key Responsibilities

Identity Security Strategy & Architecture

Define and execute enterprise identity security roadmaps aligned with Zero Trust principles.

Design scalable IAM architectures supporting modern workforce, privileged, and machine identities.

Develop identity-centric security controls that reduce attack surfaces and prevent identity-based threats.

Establish architectural standards for authentication, authorization, and access governance.

Product Engineering & Security Platforms

Lead engineering and deployment activities for:

• Sgnl.ai
• PlainID
• CrowdStrike Identity Protection
• Authentication and authorization platforms

Partner with product vendors and internal engineering teams to deliver secure, scalable solutions.

Drive integration of identity security capabilities into enterprise applications and infrastructure.

Identity Threat Protection & Attack Path Analysis

Expand attack path mapping capabilities to identify and remediate exploitable identity-based attack vectors.

Implement identity threat detection, risk scoring, and attack containment capabilities.

Develop processes to proactively identify privilege escalation paths and lateral movement opportunities.

Enhance visibility into identity relationships, entitlements, and access risks across the enterprise.

Authentication & Access Modernization

Support enhancements to authentication services, including client Authenticator capabilities and user experience improvements.

Accelerate adoption of strong authentication and adaptive access controls.

Advance Policy-Based Access Control (PBAC) initiatives utilizing platforms such as PlainID.

Drive identity-aware authorization models that improve security while reducing operational complexity.

Behavioral Analytics & Risk-Based Security

Implement behavioral biometric and user behavior analytics capabilities.

Design identity-risk models that enable adaptive authentication and access decisions.

Leverage identity intelligence to support continuous verification and Zero Trust access controls.

Required Skills & Experience

Identity & Access Management

Deep expertise in IAM architecture and identity security frameworks.

Experience with:

Identity Governance

Access Management

Privileged Access Management (PAM)

Federation and modern authentication protocols

Product Expertise

Strong hands-on experience with:

CrowdStrike Identity Protection

Proven ability to engineer, integrate, and operationalize enterprise security products.

Security Architecture

Strong understanding of:

Identity Threat Detection and Response (ITDR)