IAM Architect: Zero Trust & AI Identity Security Leader

OneMain Financial; Maryland; On-site; USD 140,000 - 190,000; Full time

Job summary

OneMain Financial is seeking a senior IAM Architect to lead enterprise identity and security architecture in Maryland. The role focuses on building scalable identity solutions, policy enforcement across cloud and on-premises, and designing patterns for AI agent identities and non-human identities.

You will translate business and regulatory requirements into secure IAM blueprints, establish least-privilege models, and drive architect reviews across platforms with cross-functional partners.

Qualifications

• 7–10 years in cybersecurity with 3+ years in IAM or security architecture.
• Deep knowledge of NIST CSF, SP 800-53, SP 800-171, and SP 800-207 Zero Trust.
• Experience designing IAM architectures for enterprise systems, cloud, SaaS, and hybrid environments.
• Strong IAM domain knowledge: lifecycle, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, reviews.
• Hands-on with Okta, Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos and privilege access technologies.
• Experience in regulated environments aligning identity controls to compliance.
• Excellent communication, collaboration, and executive-facing presentation skills.

Responsibilities

• Lead IAM architecture reviews for new technologies, applications, AI agents, and enterprise systems.
• Develop enterprise IAM blueprints aligned to NIST standards and Zero Trust.
• Collaborate with engineering and security teams to deploy identity-enabled systems.
• Provide guidance on risk mitigation for authentication, privileged access, and secrets.
• Mentor junior architects and communicate complex concepts to leadership.

Skills

IAM architecture

NIST CSF/SP 800-53/171/800-207

Zero Trust

Identity lifecycle management

RBAC/ABAC/PBAC

SSO/MFA

OAuth/OIDC/SAML

APIs & security patterns

Regulatory compliance

Executive communication

Education

Bachelor's degree in Cybersecurity or related

CISSP or equivalent

Tools

Okta

Microsoft Entra ID

SCIM

SAML

OAuth

OIDC

LDAP

Kerberos

Job description

OneMain Financial is seeking a senior IAM Architect to lead enterprise identity and security architecture in Maryland. The role focuses on building scalable identity solutions, policy enforcement across cloud and on-premises, and designing patterns for AI agent identities and non-human identities.

You will translate business and regulatory requirements into secure IAM blueprints, establish least-privilege models, and drive architect reviews across platforms with cross-functional partners.