IAM Architect: Secure Identity & Privilege Governance

TikTok USDS Joint Venture; New York (NY); On-site; USD 147,000 - 270,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to lead the design, deployment, and operationalization of the IAM program across on-prem and cloud environments. You will collaborate with cyber, privacy, engineering, and data protection analysts to enforce security by design and least privilege principles, aligning with USDS policies and standards.

You will drive enterprise IAM strategies, implement SSO/MFA and directory services, onboard applications, and

Qualifications

• Bachelor's or Master's degree in a related field (e.g., Information Management, Computer Science, Cyber Security).
• 5+ years in Identity and Access Management, specifically IAM architecture.
• Hands-on experience with authentication and authorization protocols (OIDC/OAuth 2.0, SAML 2.0, SCIM, FIDO2/WebAuthn).

Responsibilities

• Develop enterprise-wide IAM strategies and roadmaps (Worforce IAM, IGA, PAM).
• Architect solutions for SSO, MFA, and directory services (AD, Azure AD).
• Engineer onboarding of applications onto IAM platforms (Azure AD, Google Workspace).
• Define automated workflows for user lifecycle management (joiners, movers, leavers).
• Design integrations between identity providers and cloud services; automate privileged account lifecycles.
• Ensure IAM solutions comply with ISO, SOC2, PCI and Zero Trust principles.
• Address data residency and fine-grained RBAC requirements in IAM programs.
• Assist in governance framework development and policy creation for access control.
• Integrate IAM with security tools (SIEM, vulnerability management).
• Deploy and operationalize PAM (on-prem and Privilege Cloud).
• Implement privileged session management and credential vaulting.
• Create and review technical and functional requirements for IAM technologies.
• Operationalize access management workflows like access reviews and remediations.
• Report on key metrics and visuals for weekly, monthly cadences.
• Participate in security reviews to enforce access governance policies.
• Foster least privilege principles and collaborate with stakeholders.
• Provide technical oversight for junior IAM engineers.

Skills

IAM architecture

Okta

Ping Identity

Entra ID

SailPoint

Saviynt

CyberArk

BeyondTrust

AWS IAM

Azure AD

Active Directory

LDAP

Python

Java

PowerShell

REST APIs

SAML

OAuth 2.0

Education

Bachelor's or Master's degree in IT/CS/IS

Tools

Active Directory

Azure AD/Entra ID

Okta

Ping Identity

SailPoint

Saviynt

CyberArk

BeyondTrust

Job description

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to lead the design, deployment, and operationalization of the IAM program across on-prem and cloud environments. You will collaborate with cyber, privacy, engineering, and data protection analysts to enforce security by design and least privilege principles, aligning with USDS policies and standards.

You will drive enterprise IAM strategies, implement SSO/MFA and directory services, onboard applications, and