IAM Architect: Identity & Access Governance

Tanium; United States; Hybrid; USD 180,000 - 230,000; Full time

Job summary

Tanium is seeking a Staff Identity and Access Management Engineer to design, implement, and manage IAM/IGA across its corporate infrastructure in a hybrid, multi-location setup (Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; Reston, VA). You will lead IAM projects, ensure lifecycle governance, and align with risk and compliance requirements.

The role requires 8–10 years in IAM, experience with SSO/MFA/PAM, and hands-on work with Entra ID and Active Directory in hybrid environments.

Qualifications

• 8–10 years of IAM experience, incl. IGA integrations with HRIS systems.
• Experience implementing and managing an IAM product (Lumos, SailPoint, Saviynt, etc.).
• Hands-on with Entra ID and Active Directory in hybrid environments.
• Strong onboarding/off-boarding, lifecycle workflows, and policy compliance.

Responsibilities

• Design and manage IAM/IGA solutions across corporate infra, incl. SSO, MFA, PAM.
• Build and maintain identity automation and workflows; troubleshoot issues.
• Own the identity lifecycle; monitor, document, and improve processes.
• Partner with GRC to maintain IAM/IGA policies for ISO 27001, FedRAMP, GDPR, HIPAA.
• Assess systems for security gaps and ensure patch and policy compliance.
• Lead delivery on IAM/IGA projects; monitor performance and optimize.
• Respond to and resolve IAM-related incidents; mentor engineers across IT/Security.

Skills

IAM

IGA integrations

Hybrid work

Strong problem solving

Cross-functional collab

Security/compliance

Communication

Education

Bachelor's Degree in Computer Science or related field

Tools

Lumos

SailPoint

Saviynt

Entra ID

Active Directory

PowerShell

Job description

Tanium is seeking a Staff Identity and Access Management Engineer to design, implement, and manage IAM/IGA across its corporate infrastructure in a hybrid, multi-location setup (Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; Reston, VA). You will lead IAM projects, ensure lifecycle governance, and align with risk and compliance requirements.

The role requires 8–10 years in IAM, experience with SSO/MFA/PAM, and hands-on work with Entra ID and Active Directory in hybrid environments.