IAM Architect 6337

Alleare Consulting; Dallas (TX); Hybrid; USD 124,000 - 193,000; Full time

Job summary

Alleare Consulting, LLC seeks an experienced IAM Architect to define and lead enterprise IAM strategy and architecture across cloud, on‑premises, SaaS, and AI environments. You will shape governance, standards, and roadmaps for human, non‑human, and agent identities, influencing stakeholders at all levels.

The role requires deep expertise in identity lifecycle, provisioning, SSO protocols, and cross‑platform integration, with a focus on scalable, secure identity solutions for a global

Qualifications

• 10+ years in IAM architecture, engineering, or design in complex environments.
• Breadth across IAM domains; ability to design cross‑platform solutions.
• Knowledge of IAM principles: lifecycle, provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, PAM, Zero Trust.

Responsibilities

• Define enterprise IAM strategy, target architectures, and long‑term roadmaps for human, non‑human, and agent identities.
• Create architecture diagrams, principles, decisions, capability models, and transition plans across IAM stack.
• Assess requirements, cyber risks, and regulatory obligations to propose practical solutions.

Skills

IAM architecture

Enterprise IAM

Zero Trust

IAM governance

Architecture diagrams

Stakeholder influence

Cloud identity

SAML/OAuth/OIDC

Agentic AI identity

AI identity management

Tools

SailPoint IdentityIQ

Identity Security Cloud

PingFederate

PingDirectory

Microsoft Entra

Active Directory

ServiceNow

Datadog

Splunk

AI identity platforms (Agentic Fabric/Entro)

Job description

IAM Architect 6+ Month Contract Hybrid 3 days/week on-site in Dallas, TX, McLean, VA, or Memphis TN (6337)

We have an immediate job opening for an IAM Engineer to join our team and work on-site in a hybrid capacity at one of our clients global HQs in either Texas, Tennessee, or Virginia. We are seeking a highly experienced and visionary identity and access management professional to define and lead enterprise-wide IAM strategy, architecture, and governance across a complex, global organization. This role serves as a key architectural authority responsible for translating business, security, risk, and regulatory requirements into durable, scalable identity solutions that span cloud, on-premises, SaaS, application, and AI environments. The ideal candidate brings deep expertise across the full identity ecosystem, covering both human and non-human identities, and possesses the technical breadth, leadership presence, and communication skills necessary to influence stakeholders at all levels of the organization. This is a high-impact opportunity to shape the future of identity security at enterprise scale, including the emerging frontier of agentic AI identity management.

Responsibilities

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities
• Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem
• Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services
• Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates
• Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance
• Establish documented standards and design patterns across the IAM technology stack
• Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance
• Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost
• Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments
• Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options
• Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability
• Develop solution recommendations that support enterprise governance and risk management strategy
• Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests

Required Skills

• 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments
• Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions
• Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles
• Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations
• Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences
• Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems
• Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies (preferred)
• Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms (preferred)
• Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models (preferred)
• Relevant security, cloud, or architecture certifications are preferred