IAM Architect: Enterprise Identity & Access Strategy

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 162,000 - 270,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to define, implement, and operate IAM controls across a large, multi-cloud footprint. You will work with cyber, privacy, engineering, and data protection teams to enforce security by design and least privilege principles.

You will design, deploy and operationalize IAM programs including SSO, MFA, privileged access, and access governance, while ensuring compliance with ISO, SOC2, PCI, and regional requirements.

Qualifications

• Bachelor's or Master's in a related field; 5+ years in IAM architecture.
• Hands-on experience with OIDC/OAuth 2.0, SAML 2.0, SCIM, FIDO2/WebAuthn.
• Experience with IAM product suites: Okta, Ping Identity, Entra ID, SailPoint, Saviynt, CyberArk, BeyondTrust.
• Experience architecting IAM in AWS/Azure/GCP; LDAP/AD knowledge. Proficient in RESTful APIs.

Responsibilities

• Develop enterprise-wide IAM strategies, including roadmaps for Workforce IAM, IGA, and PAM.
• Architect solutions for SSO, MFA, and directory services (AD/Entra ID).
• Engineer onboarding of applications onto IAM platforms (Azure AD, Google Workspace).
• Define automated workflows for user lifecycle management (joiners, movers, leavers).
• Design and manage integrations between identity providers and cloud services; automate PAM lifecycles.
• Ensure IAM solutions comply with ISO, SOC2, PCI and Zero Trust principles.
• Address data residency and fine-grained RBAC requirements and controls.
• Develop access governance policies and procedures; integrate with SIEM and vulnerability tools.

Skills

IAM architecture

SSO

MFA

OIDC/OAuth 2.0

SAML 2.0

SCIM

FIDO2/WebAuthn

Automation (Python/PowerShell)

RESTful APIs integration

Executive communication

Education

Bachelor's or Master's in related field

Tools

Okta

Ping Identity

Microsoft Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

BeyondTrust

Job description

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to define, implement, and operate IAM controls across a large, multi-cloud footprint. You will work with cyber, privacy, engineering, and data protection teams to enforce security by design and least privilege principles.

You will design, deploy and operationalize IAM programs including SSO, MFA, privileged access, and access governance, while ensuring compliance with ISO, SOC2, PCI, and regional requirements.