IAM Security Architect

EPAM Systems; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

EPAM Systems Inc. seeks an experienced IAM Security Architect to design and implement security architectures for Identity and Access Management across enterprise, cloud and hybrid environments.

You will shape IAM capabilities, enforce least privilege and Zero Trust, and collaborate with cross-functional teams to embed identity security into solutions. You will evaluate IAM technologies, manage identity governance, and contribute to automation using PowerShell, Python, REST APIs and related

Qualifications

• Bachelor's degree in CS, Cybersecurity or related field.
• 5+ years in information security with IAM focus.
• Experience delivering or contributing to IAM projects.

Responsibilities

• Design and implement IAM architectures for enterprise, cloud and hybrid environments.
• Gather requirements for IAM solutions during migrations and improvements.
• Define IAM capabilities incl. lifecycle, provisioning, SSO, MFA and governance.
• Evaluate IAM technologies and integrations with cloud platforms and enterprise apps.
• Collaborate across teams to embed identity security into solutions.
• Support automation using scripting and REST APIs.

Skills

IAM architecture

Identity lifecycle

Zero Trust

RBAC/ABAC

SAML/OAuth

PAM/IGA

Cloud security

AI in IAM

PowerShell

REST APIs

Communication

Education

Bachelor's degree in Computer Science

Tools

Microsoft Entra ID

Active Directory

Okta

Ping Identity

SailPoint

Saviynt

CyberArk

Job description

We are seeking an experienced IAM Security Architect to design and implement security architectures and controls for Identity and Access Management systems across enterprise, cloud and hybrid environments. In this role, you will shape IAM capabilities, strengthen access control models, and collaborate with cross-functional teams to embed identity security into enterprise solutions, while exploring AI-assisted tools to enhance IAM processes.

Responsibilities

• Design and implement security architectures and controls for IAM systems across enterprise, cloud and hybrid environments
• Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements
• Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governance
• Design and improve authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles
• Conduct IAM security architecture reviews, risk assessments and access control design evaluations
• Develop IAM reference architectures, security standards, access control policies and identity governance guidelines
• Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services
• Design and support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs
• Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions
• Support IAM automation using PowerShell, Python, REST APIs, SCIM or Terraform
• Apply AI-assisted tools and workflows to improve identity and access risk analysis, access reviews, entitlement analysis, role and policy analysis, provisioning workflow optimization, compliance reporting and security scripting
• Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversight
• Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering
• Background in delivering or significantly contributing to IAM implementation, migration, integration or modernization projects
• Expertise in at least one enterprise IAM, IGA, PAM or identity federation platform
• Understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access
• Practical experience with IAM architecture design, identity security controls, access policies or identity governance processes
• Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos
• Skills in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArk
• Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCP
• Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations
• Understanding of security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001
• Familiarity with IAM automation, scripting, APIs and identity integration workflows
• Intermediate practical experience with AI-assisted tools and automation, including structured prompting, generating and validating scripts, queries, access policies and documentation with AI
• Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs
• Strong communication and collaboration skills
• Nice to have Experience with Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenarios Experience with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures Experience integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate Understanding of AI security risks, including sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage CISSP, CISM, CISA, CCSP, CCSK, Microsoft SC-300, Microsoft SC-100, Okta Certified Professional/Administrator/Consultant, SailPoint, Saviynt, CyberArk or Ping Identity certifications Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner certifications