IAM Platform Architect

Spectraforce Technologies; Memphis (TN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Spectraforce Technologies, Inc. is seeking an IAM Platform Architect to define strategy, architecture, and governance for identity and access management globally.

The role covers human and non-human identities across cloud, on-premises, SaaS, and AI environments, guiding secure, scalable services and an integrated roadmap. You will lead architecture reviews, document standards, and coordinate across security, risk, and business teams to deliver durable identity solutions leveraging SailPoint,

Qualifications

• 10+ years of progressive IAM architecture, engineering, or solution design in complex enterprise environments.
• Deep breadth across multiple IAM domains and platforms with ability to design integrated cross-platform solutions.
• Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow.
• Deep knowledge of IAM principles: identity lifecycle, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, PAM, Zero Trust.
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations.
• Strong communication and influence skills for technical, security, risk, and business audiences.
• Experience using observability/analytics platforms such as Datadog and Splunk with identity data integration.

Responsibilities

• Define enterprise IAM strategy, target-state architectures, and multi-year roadmaps for human, non-human, and agent identities.
• Create architecture diagrams, principles, decision records, models, and transition plans across the IAM stack.
• Assess requirements, cyber risks, and regulatory obligations to recommend practical, supportable solutions.
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services.
• Design enterprise identity solutions spanning governance, authentication, access requests, provisioning, directory services, privileged access, secrets, and certificates.
• Automate processes while improving user experience and governance.
• Establish standards and design patterns across the IAM technology stack.
• Lead architecture reviews; produce diagrams, processes, integration specs, and implementation guidance.
• Resolve cross-platform issues balancing security, resiliency, operability, and cost.
• Evaluate IAM products and guide solution options; drive adoption across hundreds of applications.

Skills

IAM architecture

Enterprise architecture

Security governance

Stakeholder communication

Cross-functional leadership

Tools

SailPoint IdentityIQ

SailPoint ISC

PingFederate

PingDirectory

Microsoft Entra

Active Directory

ServiceNow

One Identity Safeguard

HashiCorp Vault

RSA SecureID

Datadog

Splunk

Job description

Role: IAM Platform Architect

Location: McLean, VA, Dallas, TX or Memphis, TN (2-3 days onsite)

Duration: 6 Months - Contract to Hire

The IAM Platform Architect will define the strategy, architecture, standards, and governance model for identity and access management capabilities. This role requires a holistic understanding of the identity ecosystem and the ability to translate business, security, risk, and regulatory requirements into durable enterprise designs. The architect will cover both human and non-human / agent identities and will become a key architectural authority across the IAM technology stack, including SailPoint IdentityIQ, Sailpoint ISC, PingFederate, PingAuthorize, Ping Agent IAM Core, PingDirectory, Microsoft Entra, Microsoft Active Directory, ServiceNow, One Identity Safeguard, HashiCorp Vault, and RSA SecureID. The successful candidate will establish an integrated roadmap and guide the implementation of secure, scalable identity services across cloud, on-premises, SaaS, application, and AI environments.

HOW YOU WILL MAKE AN IMPACT

IAM Strategy, Architecture, and Roadmaps

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities.
• Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem.
• Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions.
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services.

Enterprise Solution Design and Governance

• Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates.
• Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance.
• Establish documented standards and design patterns across the IAM technology stack.
• Lead complex architecture and design reviews; produce clear diagrams, process flows, integration specifications, and implementation guidance.
• Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost.

Technology Evaluation and Advisory

• Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments.
• Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options.
• Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability.
• Develop solution recommendations that support enterprise governance and risk management strategy.
• Drive adoption of standard IAM solutions across hundreds of business applications, such as SAML/OAuth SSO, SCIM or Just-in-Time (JIT) provisioning, role-based access control (RBAC), centralized access requests via ServiceNow, etc.

Qualifications:

• 10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments.
• Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions.
• Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow.
• Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles.
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations.
• Strong communication and influence skills, with the ability to translate between technical, security, risk, and business audiences.
• Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems.

Preferred Qualifications:

• Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies.
• Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on Sailpoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms.
• Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models.
• Relevant security, cloud, or architecture certifications.

Contract to Hire Expectations

• Demonstrate the technical depth, leadership behaviors, collaboration skills, and delivery discipline expected of the target permanent role.
• Build durable documentation, operating practices, and knowledge transfer so capabilities remain supportable and scalable.
• Successful conversion is subject to business need, approved headcount, performance, and applicable hiring requirements.