IAM Security Architect role in VA, Dallas, TN

Noblesoft Solutions; McLean (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

Noblesoft Solutions, Inc. seeks an executive IAM architect to define and lead enterprise-wide identity strategy, architecture, and governance across cloud, on-premises, SaaS, application, and AI environments.

The role requires translating business, security, risk, and regulatory requirements into durable identity solutions with broad influence. The ideal candidate brings deep expertise across IAM domains, strong leadership, and the ability to influence stakeholders at all levels.

Qualifications

• Experience leading enterprise IAM strategy across cloud, on-premises, SaaS, and AI environments.
• Deep knowledge of identity governance, authentication, provisioning, and directory services.
• Strong ability to translate business, security, risk, and regulatory requirements into durable IAM solutions.
• Proven leadership, communication, and stakeholder influence at executive levels.

Responsibilities

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities.
• Create architecture diagrams, principles, decision records, and capability models for the identity ecosystem.
• Assess business requirements, cyber risks, and regulatory obligations to recommend practical, scalable solutions.
• Identify gaps, debt, dependencies, and investment priorities across identity platforms and services.
• Design enterprise IAM solutions spanning governance, authentication, provisioning, directory services, privileged access, and secrets.
• Automate and streamline processes while improving end-user experience and governance.
• Establish standards and design patterns across the IAM stack.
• Lead architecture reviews with clear diagrams, flows, and integration specs.
• Balance security, resiliency, scalability, operability, user experience, and cost in decisions.
• Evaluate IAM products via market analysis, PoCs, and technical assessments.
• Advise security, infrastructure, applications, AI, and business teams on identity requirements & options.
• Guide implementation of agentic AI identity capabilities across agents, workloads, and service accounts.
• Develop recommendations to support governance and risk management.
• Drive adoption of standard IAM solutions across hundreds of applications (SSO, provisioning, RBAC, access requests).

Skills

IAM architecture

Enterprise IAM

Stakeholder influence

Zero Trust

OAuth/OIDC/SAML

LDAP/Directory services

PAM/MFA

APIs integration

Education

Certifications in security/cloud/architecture

Tools

SailPoint IdentityIQ

Identity Security Cloud

PingFederate

PingDirectory

Microsoft Entra

Active Directory

ServiceNow

Datadog

Splunk

HashiCorp Vault

One Identity Safeguard

RSA SecurID

Agentic Fabric/Entro

Ping Agent IAM Core

Job description

We are seeking a highly experienced and visionary identity and access management professional to define and lead enterprise-wide IAM strategy, architecture, and governance across a complex, global organization. This role serves as a key architectural authority responsible for translating business, security, risk, and regulatory requirements into durable, scalable identity solutions that span cloud, on-premises, SaaS, application, and AI environments. The ideal candidate brings deep expertise across the full identity ecosystem, covering both human and non-human identities, and possesses the technical breadth, leadership presence, and communication skills necessary to influence stakeholders at all levels of the organization. This is a high-impact opportunity to shape the future of identity security at enterprise scale, including the emerging frontier of agentic AI identity management.

Responsibilities:

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities
• Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem
• Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services
• Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates
• Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance
• Establish documented standards and design patterns across the IAM technology stack
• Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance
• Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost
• Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments
• Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options
• Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability
• Develop solution recommendations that support enterprise governance and risk management strategy
• Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests

Skills:

• Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions
• Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles
• Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations
• Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences
• Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems
• Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies (preferred)
• Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms (preferred)
• Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models (preferred)

Experience:

• 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments

Qualifications:

• Relevant security, cloud, or architecture certifications are preferred