IAM Architect: Shape Secure Identity & Access

TikTok USDS Joint Venture; New York (NY); On-site; USD 147,000 - 270,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

401(k) with company match

Paid parental leave

Job summary

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to lead the design, deployment and operation of enterprise IAM programs. You will work with cyber, privacy, engineering and data protection teams to enforce security by design and least privilege.

The role focuses on building governance, automation and integration across on‑prem and cloud environments, including PAM, IAM governance and zero trust principles.

Qualifications

• Bachelor's or Master’s degree in a related field such as Cyber Security, Information Management or Computer Science.
• 5+ years in Identity and Access Management with IAM architecture focus.
• Hands-on experience with authentication/authorization protocols (OIDC/OAuth 2.0, SAML 2.0).
• Experience with IAM product suites (Okta, Ping, Azure AD).
• Proficiency in RESTful APIs, scripting (Python/PowerShell/Java) and automations.

Responsibilities

• Develop enterprise IAM strategies and roadmaps (Workforce IAM, IGA, PAM).
• Architect solutions for SSO, MFA and directory services (Azure AD/Entra ID).
• Engineer onboarding of applications onto IAM platforms (Azure AD, Google Workspace).
• Define automated workflows for user lifecycle management (joiners/movers/leavers).
• Design integrations between identity providers and cloud services; implement privileged access controls.

Skills

IAM architecture

OIDC / OAuth 2.0

SAML 2.0

SCIM

RESTful APIs

RBAC

Python/Java/PowerShell

Education

Bachelor's or Master's degree in related field

Tools

Okta

Ping Identity

Microsoft Entra ID (Azure AD)

SailPoint

CyberArk

BeyondTrust

Job description

TikTok USDS Joint Venture LLC is seeking an Identity and Access Management Architect to lead the design, deployment and operation of enterprise IAM programs. You will work with cyber, privacy, engineering and data protection teams to enforce security by design and least privilege.

The role focuses on building governance, automation and integration across on‑prem and cloud environments, including PAM, IAM governance and zero trust principles.