IAM Architect

gobravvo; McLean (VA); Presencial; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Employee Stock Ownership Program

Engagement Manager support

Best of Staffing award

Descripción de la vacante

gobravvo is seeking an IAM Architect to lead the enterprise strategy, standards, and governance for Identity and Access Management across cloud, on-premises, SaaS, and AI/agent use cases. You will design secure, scalable identity solutions for human and non-human identities and collaborate with security, infrastructure, and risk teams.

You will drive architectural reviews, produce comprehensive documentation, and promote standardized IAM patterns such as IGA, SSO, PAM, and secrets management

Formación

• Minimum of 10 years of progressive experience in IAM architecture, engineering, or solution design within complex enterprise environments.
• Deep expertise in IAM fundamentals and modern security frameworks.

Responsabilidades

• Define target-state IAM architecture, principles, and multi-year roadmaps for human and non-human identities.
• Lead architecture and design reviews, producing diagrams, decision records, capability models, and transition plans.
• Develop and promote standards and reusable patterns for core IAM components such as IGA, SSO, federation, directory services, PAM, and secrets management.
• Translate business, security, risk, and regulatory requirements into scalable IAM solutions.
• Drive adoption of standardized IAM approaches across the organization, including SSO, automated provisioning, RBAC, and access workflows.
• Stay current with emerging IAM technologies, frameworks, and industry best practices.

Conocimientos

OAuth/OIDC

SAML

RBAC

Zero Trust

IAM lifecycle

Cloud/on-prem IAM

Herramientas

SailPoint IdentityIQ

Identity Security Cloud

Microsoft Entra/AD

PingFederate

PingDirectory

Descripción del empleo

The IAM Architect plays a critical role in shaping the enterprise strategy, standards, and governance for Identity and Access Management (IAM) within large-scale, complex business environments. As an IAM Architect, you will be responsible for designing and implementing secure, scalable identity solutions that support both human and non-human identities across cloud, on-premises, SaaS, and emerging technologies. This pivotal position requires a deep understanding of IAM fundamentals, including identity lifecycle management, authentication protocols, authorization models, and modern security frameworks. The IAM Architect will collaborate with cross-functional teams, including security, infrastructure, application development, and risk management, to ensure cohesive and compliant IAM practices that align with organizational objectives and regulatory requirements.

Professionals in this role are expected to lead architectural reviews, produce comprehensive documentation, and develop reusable patterns and standards that drive efficiency and security across the enterprise. The IAM Architect will also play a key role in promoting the adoption of the latest IAM technologies and best practices, such as Zero Trust, RBAC, SSO, and PAM, to enhance the organization's security posture. This opportunity is ideal for individuals with a proven background in IAM architecture, engineering, or solution design, especially those experienced in designing strategies for large, dynamic environments.

Joining our team offers an opportunity to contribute to a forward-thinking organization that values innovation, collaboration, and the professional development of its employees.

IAM Architect - Summary

• Drive the enterprise-wide vision and strategy for Identity and Access Management, ensuring security, scalability, and regulatory compliance.
• Collaborate with diverse teams to deliver robust identity solutions for cloud, on-premises, SaaS, and AI/agent use cases.
• Lead architecture and design reviews, producing detailed documentation, diagrams, and strategic roadmaps.
• Establish and enforce standards and reusable patterns for IGA, SSO/federation, directory services, PAM, and secrets management.
• Support the organization’s mission to maintain secure and efficient access control across all digital platforms.

Duties & Responsibilities

• Define and implement target-state IAM architecture, principles, and multi-year roadmaps for both human and non-human identities.
• Lead reviews of architecture and design, producing critical documentation such as diagrams, decision records, capability models, and transition plans.
• Develop and promote standards and reusable patterns for core IAM components, including Identity Governance and Administration (IGA), Single Sign-On (SSO), federation, directory services, Privileged Access Management (PAM), and secrets management.
• Translate business, security, risk, and regulatory requirements into scalable, durable IAM solutions.
• Drive the adoption of standardized IAM approaches across the organization, including SSO, automated provisioning, RBAC, and access request workflows.
• Collaborate with stakeholders from security, infrastructure, application, and risk teams to deliver integrated identity solutions.
• Stay current with emerging IAM technologies, frameworks, and industry best practices to continuously improve the organization’s security posture.

Salary & Benefits

• Competitive compensation package designed to reward experience and expertise in IAM architecture.
• Comprehensive benefits including medical, dental, vision, and life insurance.
• Employee Stock Ownership Program, offering a unique opportunity for long-term investment in your professional future.
• Access to a dedicated Engagement Manager committed to your success and professional development.
• Recognition as a Best of Staffing® Client and Talent Award winner for twelve consecutive years.

Qualifications & Requirements

• Minimum of 10 years of progressive experience in IAM architecture, engineering, or solution design within complex enterprise environments.
• Deep expertise in IAM fundamentals, such as identity lifecycle management, OAuth/OIDC, SAML, LDAP, APIs, SCIM, RBAC, and Zero Trust concepts.
• Hands-on experience with SailPoint (IdentityIQ and/or Identity Security Cloud) and Microsoft Entra/Active Directory platforms.
• Demonstrated experience designing and integrating federation and directory services, such as PingFederate and PingDirectory.
• Exceptional communication skills, with the ability to translate complex technical concepts for both technical and non-technical stakeholders.
• Proficiency in producing clear, actionable architecture documentation and recommendations.

Ideal Candidate Snapshot

• Innovative, detail-oriented, and highly analytical professional with a passion for advancing enterprise security.
• Proven leadership in driving adoption of standardized IAM approaches across diverse teams and business units.
• Effective collaborator, able to influence and build consensus among technical and business stakeholders.
• Continually seeks to stay ahead of industry trends and emerging IAM technologies.
• Committed to delivering high-quality solutions and documentation in fast-paced, dynamic environments.

Other Relevant Information

• The IAM Architect position is an excellent opportunity to join an industry-leading organization recognized for its dedication to employee success and innovation.
• Enjoy the benefits of working in a supportive environment that values diversity, inclusion, and professional growth.
• This role offers a chance to make a significant impact on the organization’s security infrastructure and future strategy.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. IDR is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite employees to voluntarily self-identify their race or ethnicity, gender, and veteran status (if applicable). Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable laws, executive orders, and regulations, including those that require the information to be summarized and reported to the federal government for civil rights enforcement. You may access this form here.