IAM Security Architect: Cloud Identity & Governance

CAA Club Group; Nashville (TN); On-site; USD 179,000 - 208,000; Full time

Benefits offered by this job

Benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) in Nashville is seeking a Cybersecurity Architect to lead the identity and access management platform design within a SaaS-enabled, cloud-first environment. You will secure complex identity flows, APIs, and third-party integrations while guiding enterprise security and governance.

This hands-on role requires IAM architecture experience, Zero Trust, and collaboration with HRIS, IT service owners, and security incident response teams.

Qualifications

• 7+ years in Information Technology with security focus.
• 3+ years in IAM Architecture or Engineering.
• Bachelor's or Master's in a relevant field.
• Experience designing IAM projects from design to implementation.
• Strong communication to explain complex concepts to diverse audiences.
• Experience with Zero Trust Identity architecture.
• Understanding OAuth, SAML and OpenID frameworks.
• Scripting knowledge: PowerShell, Python or JavaScript.

Responsibilities

• Maintain architectural diagrams and workflows of the identity access management platform.
• Develop standards and guidelines for access management across the company.
• Design overall structure for cloud and on-premise applications in IAM.
• Create identity governance workflows with attestation and auditing.
• Ensure systems are scalable, maintainable and meet business needs.
• Design a RESTful identity API to provide Identity as a Service.
• Participate in security incident response and threat mitigation.

Skills

IAM architecture

Identity & access management

Zero Trust

Scripting: PowerShell/Python/Java

Education

Bachelor's or Master's in a relevant field

Tools

Azure AD

Active Directory

AD Connect

Azure Automation

Power Automate

SAML

OpenID

SSO

SCIM

OAuth

PowerShell

RESTful APIs

Okta

SailPoint

Ping Federate

Splunk

RBAC

Job description

Creative Artists Agency (CAA) in Nashville is seeking a Cybersecurity Architect to lead the identity and access management platform design within a SaaS-enabled, cloud-first environment. You will secure complex identity flows, APIs, and third-party integrations while guiding enterprise security and governance.

This hands-on role requires IAM architecture experience, Zero Trust, and collaboration with HRIS, IT service owners, and security incident response teams.