IAM Architect & Strategy Lead — Cloud, Zero Trust

Crowe; Dallas (TX); On-site; USD 104,500 - 213,800; Full time

Job summary

Crowe Identity and Access Management Architect – Manager role located in Dallas, TX, partners with client stakeholders and Crowe leadership to define IAM strategy, architecture, and roadmaps across complex environments. This role blends strategic leadership with hands-on solution design, engineering, and client engagement to secure identities and enable business objectives.

You will lead IAM strategy, design cloud and on‑prem solutions, govern access, and guide Zero Trust implementations.

Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
• 7+ years of IAM, cybersecurity architecture, or related roles (consulting or industry).
• Proven experience designing and implementing enterprise IAM across cloud and hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance and privileged access management.
• Hands-on experience with IAM tools such as Entra ID (Azure AD), SailPoint, Saviynt, CyberArk, Ping Identity, Okta, or similar.

Responsibilities

• Lead IAM strategy development, roadmap creation, and reference architecture design aligned to client business objectives.
• Define and deliver enterprise IAM architecture, including authentication, authorization, identity lifecycle management, and privileged access management.
• Advise clients on Zero Trust principles and identity-centric security strategies.
• Present IAM strategies, architectures, and findings to technical and executive stakeholders, including C-suite leadership.
• Design and implement IAM solutions across cloud (Azure, AWS, GCP), on-premises, and hybrid environments.
• Architect and integrate IAM platforms with enterprise applications, directories, APIs, and DevOps pipelines.
• Provide guidance on modern authentication and authorization approaches (SSO, MFA, passwordless, RBAC, ABAC).
• Lead or support implementation of modern identity and authorization platforms, including fine-grained authorization and entitlement visibility solutions.
• Design and guide API-driven integrations between IAM platforms and enterprise systems, leveraging REST-based services and identity data flows.
• Lead or support implementation efforts, including identity governance, provisioning, access reviews, and privileged access controls.
• Partner with clients to accelerate onboarding and adoption of IAM and authorization capabilities, including requirements gathering, solution design, and enablement.
• Conduct IAM risk assessments, threat modeling, and control evaluations; support remediation and continuous improvement.
• Support regulatory compliance and alignment with frameworks such as NIST, ISO, CIS, and industry-specific requirements.
• Apply IAM expertise within enterprise cybersecurity programs, collaborating across domains such as GRC, cloud security, and data protection.
• Collaborate with cross-functional teams including security, cloud, application development, and risk/compliance.

Skills

IAM architecture

Cloud & hybrid environments

Zero Trust

OAuth2/OIDC/SAML

Identity governance

Privileged access management

API integrations

Scripting (Python/SQL)

Stakeholder management

Security architecture

Education

Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, Engineering

Tools

Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

Ping Identity

Okta

Job description

Crowe Identity and Access Management Architect – Manager role located in Dallas, TX, partners with client stakeholders and Crowe leadership to define IAM strategy, architecture, and roadmaps across complex environments. This role blends strategic leadership with hands-on solution design, engineering, and client engagement to secure identities and enable business objectives.

You will lead IAM strategy, design cloud and on‑prem solutions, govern access, and guide Zero Trust implementations.