IAM Architect (1148329)

The Judge Group; Milton (GA); On-site; USD 140,000 - 145,000; Full time

Job summary

The Judge Group is seeking an IAM Architect to lead designing, implementing, and governing enterprise IAM across cloud and on-prem environments in Alpharetta, GA. You will bridge security, IT architecture, and business needs to enforce robust identity governance and compliance.

Responsibilities include leading IAM platform deployments (Azure AD Entra ID, Okta, SailPoint, CyberArk, Ping Identity), implementing zero-trust models, and enabling SSO, MFA, and passwordless authentication with

Qualifications

• Extensive experience designing enterprise IAM architectures.
• Strong knowledge of SSO, MFA, and passwordless authentication.
• Experience with IAM platforms: Azure AD Entra ID, Okta, SailPoint, CyberArk, Ping Identity.
• Familiarity with cloud and on-prem identities (AWS/Azure/GCP, AD/LDAP).

Responsibilities

• Architecture & Design: design and develop enterprise IAM architecture aligned with security and business goals.
• Define identity lifecycle management (joiner, mover, leaver processes).
• Architect solutions for authentication (SSO, MFA, passwordless) and authorization (RBAC, ABAC).
• Federation (SAML, OAuth, OIDC) and zero trust security models.
• Implementation & Integration: lead implementation of IAM platforms and integrations with cloud/on-prem systems.
• Governance, Risk & Compliance: establish IGA frameworks and access certification campaigns.
• Security & Risk Management: enforce least privilege and monitor identity threats.
• Strategy & Roadmap: define IAM strategy and drive cloud identity transformation initiatives.

Skills

IAM architecture

Identity lifecycle

SSO/MFA/passwordless

RBAC/ABAC

SAML/OIDC

Zero Trust

Cloud identity

AD/LDAP

IAM tooling

Tools

Azure AD Entra ID

Okta

SailPoint

CyberArk

Ping Identity

AWS

Azure

GCP

Active Directory

LDAP

Job description

Location

Milton, GA

Salary

$140,000.00 USD Annually - $145,000.00 USD Annually

Description

IAM Architect

Alpharetta, GA 30009 3 Days a week

Fulltime

IAM Architect

• Design and develop enterprise IAM architecture aligned with security and business goals
• Define identity lifecycle management (joiner, mover, leaver processes)
• Architect solutions for:
• Authentication (SSO, MFA, passwordless)
• Authorization (RBAC, ABAC)
• Federation (SAML, OAuth, OIDC) Alpharetta, GA 30009

Job Description

Role Overview An IAM Architect is responsible for designing, implementing, and governing identity and access management solutions that ensure secure access to enterprise systems, applications, and data. This role bridges business requirements, cybersecurity, and IT architecture to enforce robust identity governance and compliance.

Key Responsibilities

• Architecture & Design
• Design and develop enterprise IAM architecture aligned with security and business goals
• Define identity lifecycle management (joiner, mover, leaver processes)
• Architect solutions for:
• Authentication (SSO, MFA, passwordless)
• Authorization (RBAC, ABAC)
• Federation (SAML, OAuth, OIDC)
• Develop zero trust security models for identity
• Implementation & Integration
• Lead implementation of IAM platforms such as:
• Azure AD / Entra ID
• Okta
• SailPoint
• CyberArk
• Ping Identity
• Integrate IAM systems with:
• Cloud platforms (AWS, Azure, GCP)
• On-prem systems (Active Directory, LDAP)
• Enterprise applications (SAP, Salesforce, Workday)
• Enable API security and identity federation
• Governance, Risk & Compliance
• Establish Identity Governance & Administration (IGA) frameworks
• Design role models and access certification campaigns
• Ensure compliance with standards:
• SOX, GDPR, HIPAA, ISO 27001
• Implement audit logging, monitoring, and reporting
• Security & Risk Management
• Enforce least privilege & segregation of duties (SoD)
• Design solutions to mitigate identity-based threats
• Integrate IAM with:
• SIEM (e.g., Splunk, Sentinel)
• PAM (Privileged Access Management)
• Conduct risk assessments and threat modeling
• Strategy & Roadmap
• Define IAM strategy and technology roadmap
• Evaluate and recommend IAM tools and platforms
• Drive cloud identity transformation initiatives
• Promote adoption of passwordless and Zero Trust frameworks
• Stakeholder Collaboration
• Work with:
• Security teams
• IT operations
• Application owners
• Compliance and audit teams
• Provide technical leadership and mentorship to IAM engineers
• Communicate complex IAM concepts to non-technical stakeholders