IAM Platform Architect (contract)

Hilton; McLean (VA); Hybrid; USD 110,000 - 132,000; Part time

Job summary

Hilton is seeking an experienced IAM Architect to define and lead enterprise‑wide identity and access management strategy, architecture, and governance. You will influence security, risk, and business teams across global environments including AI identities, cloud, and on‑prem solutions.

The role is hybrid, US‑based, contracting through Talent Solutions with focus on scalable, secure identity solutions for thousands of applications and users worldwide.

Qualifications

• 10+ years IAM architecture/engineering in complex enterprises.
• Experience with cloud, on‑prem, SaaS IAM environments.
• Strong ability to translate security risk and requirements into scalable IAM designs.
• Excellent communication to technical and business stakeholders.

Responsibilities

• Define enterprise IAM strategy, target architectures, and roadmaps for human, non-human, and agent identities.
• Create architecture diagrams, standards, and transition plans across IAM stack.
• Evaluate risks, regulatory obligations, and business needs to recommend practical solutions.
• Lead architecture reviews and produce implementation guidance.
• Drive standard IAM solutions across hundreds of applications (SSO, SCIM, RBAC).

Skills

IAM architecture

Identity governance

Just-in-time provisioning

SAML/OAuth SSO

SailPoint IdentityIQ/Identity Security

Education

Security certifications preferred

Tools

SailPoint IdentityIQ

Identity Security Cloud

PingFederate

PingDirectory

Microsoft Entra

Active Directory

ServiceNow

Datadog

Splunk

One Identity Safeguard

HashiCorp Vault

RSA

Job description

Please note that this is a contract role providing services to Hilton through Talent Solutions. If you are selected for this role, you will be employed by Talent Solutions and will not be an employee of Hilton. Contract workers are not employees of Hilton or any of its subsidiaries, nor will they be eligible for Hilton benefits.

This is a US based hybrid position at one of our corporate offices in McLean, VA, Dallas, TX or Memphis, TN 2-3 days/week***

Job Summary

We are seeking a highly experienced and visionary identity and access management professional to define and lead enterprise-wide IAM strategy, architecture, and governance across a complex, global organization. This role serves as a key architectural authority responsible for translating business, security, risk, and regulatory requirements into durable, scalable identity solutions that span cloud, on-premises, SaaS, application, and AI environments. The ideal candidate brings deep expertise across the full identity ecosystem, covering both human and non-human identities, and possesses the technical breadth, leadership presence, and communication skills necessary to influence stakeholders at all levels of the organization. This is a high-impact opportunity to shape the future of identity security at enterprise scale, including the emerging frontier of agentic AI identity management.

Responsibilities

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities
• Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem
• Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services
• Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates
• Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance
• Establish documented standards and design patterns across the IAM technology stack
• Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance
• Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost
• Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments
• Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options
• Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability
• Develop solution recommendations that support enterprise governance and risk management strategy
• Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests

Skills

• Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions
• Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles
• Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations
• Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences
• Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems
• Hands‑on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies (preferred)
• Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms (preferred)
• Experience with product selection, vendor evaluation, platform modernization, and transition from on‑premises to SaaS or cloud delivery models (preferred)

Experience

• 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments

Qualifications

• Relevant security, cloud, or architecture certifications are preferred

This is a rare and exciting opportunity to serve as a defining architectural voice for identity and access management within one of the world's most recognized hospitality brands. You will work at the intersection of security, technology, and innovation, helping to shape a modern, resilient identity ecosystem that supports thousands of applications and users globally. With the added dimension of agentic AI identity management on the horizon, this role offers the chance to lead in a space that is rapidly evolving and critically important, making a lasting impact on both the security posture and the digital future of a truly global enterprise.

Pay Rate Range

80 - 96 USD hourly