IAM Architect: Zero Trust & Cloud Identity Leader

Advanced Energy Management Limited; Denver (CO); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical plans

Disability & life insurance

401(k) match

Paid time off

Parental leave

Employee stock purchase plan

Job summary

Advanced Energy seeks an IT Security Analyst III to lead enterprise IAM initiatives, influence Zero Trust strategy, and modernize identity controls across global cloud and SaaS environments for a mission-critical organization in Denver, CO.

You will collaborate with security, IT, and business leaders to implement secure authentication, governance, and automation while guiding strategic IAM roadmaps and operational excellence.

Qualifications

• IAM principles: IGA, PAM, authentication, authorization, lifecycle management.
• Zero Trust, least privilege, adaptive authentication, risk-based access controls.
• On-premise, cloud, and hybrid identity environments.
• Protocols: SAML 2.0, OAuth 2.0, OpenID Connect, LDAP, Kerberos, RADIUS, SCIM.
• Strong communication, organizational and project leadership skills.
• Documentation of standards, procedures, and runbooks.

Responsibilities

• Design, implement, and maintain IAM solutions across workforce, privileged, and application identities.
• Lead integration, administration, and optimization of IAM platforms.
• Develop IAM architecture standards, roadmaps, and patterns aligned with security goals.
• Establish scalable identity solutions for cloud-first and hybrid environments.
• Evaluate emerging IAM technologies and industry best practices.
• Lead Identity Governance and Administration, Access Management, PAM, ITDR, and Zero Trust programs.
• Design and implement identity lifecycle processes: provisioning, deprovisioning, role management, access certification.
• Develop authorization models (RBAC, ABAC, PBAC) and support SoD, least privilege, and Just-In-Time access.
• Administer and enhance authentication services: SSO, MFA, passwordless, federation, conditional access.
• Support on-premise, cloud, and hybrid identity environments; integrate with cloud providers and SaaS.

Skills

IAM concepts

Zero Trust

RBAC

ABAC

PBAC

SSO

MFA

least privilege

SoD

adaptive authentication

Education

Bachelor's degree in IT, Cybersecurity, CS, or Eng

Tools

SAML 2.0

OAuth 2.0

OIDC

LDAP

Kerberos

RADIUS

SCIM

Job description

Advanced Energy seeks an IT Security Analyst III to lead enterprise IAM initiatives, influence Zero Trust strategy, and modernize identity controls across global cloud and SaaS environments for a mission-critical organization in Denver, CO.

You will collaborate with security, IT, and business leaders to implement secure authentication, governance, and automation while guiding strategic IAM roadmaps and operational excellence.