IAM Security Architect with AI

EPAM Systems; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

EPAM Systems Inc. seeks an experienced IAM Security Architect with foundational AI skills to design and implement robust Identity and Access Management across enterprise, cloud, and hybrid environments.

You will shape IAM architectures, strengthen access governance, and leverage AI-assisted tools to optimize identity security workflows. You will collaborate with cross-functional teams to integrate IAM security into enterprise solutions and enable automation using PowerShell, Python, REST APIs,

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering.
• Hands-on experience with at least one enterprise IAM, IGA, PAM or identity federation platform.
• Knowledge of IAM principles: identity lifecycle, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege, privileged access.
• Experience with IAM architecture design, identity security controls, access policies or identity governance processes.
• Familiarity with IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos.
• Understanding of cloud IAM concepts across Azure, AWS or GCP.
• Experience with AI-assisted tools and automation in IAM contexts.

Responsibilities

• Design and implement security architectures and IAM controls across enterprise, cloud, and hybrid environments.
• Gather requirements to design IAM solutions for migrations, improvements, and new implementations.
• Define and improve IAM capabilities including lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, PAM and access governance.
• Shape authentication, authorization and access control models (RBAC, ABAC, least privilege, Zero Trust).
• Conduct IAM security architecture reviews, risk assessments and access control evaluations.
• Develop IAM reference architectures, security standards and identity governance guidelines.
• Evaluate IAM technologies and cloud-native identity services; support integrations with cloud platforms and SaaS.
• Collaborate with cross-functional teams to embed IAM security into enterprise solutions.
• Enable IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform; use AI-assisted workflows responsibly.
• Identify opportunities for AI-assisted IAM automation with validation, data protection and auditability.
• Communicate IAM risks and remediation plans to stakeholders and leadership.

Skills

IAM

Security Architecture

Identity Security

Automation

AI Basics

Security Governance

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

PowerShell

Python

REST APIs

SCIM

Terraform

SAML

OAuth 2.0

OIDC

LDAP

Kerberos

Microsoft Entra ID

Active Directory

Okta

Ping Identity

Job description

We are seeking an experienced IAM Security Architect with foundational AI skills to design and implement robust Identity and Access Management solutions across enterprise, cloud, and hybrid environments. In this role, you will shape IAM architectures, strengthen access governance, and leverage AI-assisted tools to optimize identity security workflows while collaborating with cross-functional teams to embed IAM security into enterprise solutions.

Responsibilities

• Design and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud and hybrid environments
• Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements
• Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governance
• Shape authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles
• Conduct IAM security architecture reviews, risk assessments and access control design evaluations
• Development IAM reference architectures, security standards, access control policies and identity governance guidelines
• Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services
• Support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs
• Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions
• Enable IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies
• Leverage AI-assisted tools and workflows to improve IAM activities, including identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, as well as security scripting, documentation and repetitive task automation
• Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversight
• Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering
• Background in delivering or significantly contributing to IAM implementation, migration, integration or modernization projects
• Hands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platform
• Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access
• Practical experience with IAM architecture design, identity security controls, access policies or identity governance processes
• Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos
• Proficiency in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArk
• Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCP
• Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations, without requiring deep specialization in each
• Familiarity with security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001, as well as IAM automation, scripting, APIs and identity integration workflows
• Intermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research and IAM troubleshooting, applying structured prompting for technical and security tasks, generating and validating scripts, queries, access policies and documentation with AI, simplifying repetitive IAM and security workflows, and basic experience configuring AI-assisted workflows or integrations
• Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs, with willingness to further develop AI automation skills
• Strong communication, collaboration and hands-on technical skills

Nice to have

• Experience with IAM platforms such as ForgeRock, Auth0 or similar, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenarios
• Familiarity with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures
• Background in integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows
• Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate, along with an understanding of AI security risks such as sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage
• Security or IAM certifications such as CISSP, CISM, CISA, CCSP, CCSK, Microsoft SC-300, Microsoft SC-100, Okta Certified Professional/Administrator/Consultant, or SailPoint, Saviynt, CyberArk or Ping Identity certifications; AI-related certifications such as Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner are a plus