IAM Security Architect: Zero Trust & Cloud

Creative Artists Agency; Nashville (TN); Hybrid; USD 179,000 - 208,000; Full time

Benefits offered by this job

Benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) in Nashville is seeking a Cybersecurity Architect focused on IAM to design, implement, and govern identity and access across cloud and on-premise systems. The role emphasizes secure design principles, SaaS integrations, and automation of deployment pipelines.

You will partner with security and IT teams to advance enterprise security and identity governance. You will drive identity platform development, create scalable IAM workflows, and contribute to incident

Qualifications

• Minimum 7 years in IT with focus on information security.
• At least 3 years in IAM architecture/engineering.
• Experience architecting IAM projects from design through implementation.
• Strong written and verbal communication; able to explain complex concepts to varied audiences.
• Designed and supported Zero Trust Identity architecture.
• Knowledge of OAuth, SAML and OpenID frameworks.

Responsibilities

• Maintain architectural diagrams and workflows of the identity access management platform.
• Design, evaluate, and analyze IAM programs to support the company’s strategy.
• Develop standards and guidelines for access management across the company and departments.
• Understand user lifecycle management including provisioning/de-provisioning, access requests, entitlements, and audits.
• Collaborate with HRIS, IT service owners, service desk, and end-users to design identity workflows.
• Present design visions that meet user and business needs.
• Architect the structure for cloud and on-prem applications into the IAM platform.
• Create identity governance workflows with attestation and auditing.
• Ensure systems are scalable and maintainable to meet business needs.
• Create documentation supporting architectural decisions and workflows.
• Review identity workflows for lifecycle management, auditing, governance and self-service.
• Design a RESTful identity API to provide Identity as a Service to downstream services.
• Participate in security incident response to identify and mitigate threats.

Skills

IAM Architecture

Zero Trust

OAuth

SAML

OpenID

REST APIs

Cloud Security

Communication

Just-in-Time Access

PowerShell

Education

Bachelor’s or Master’s in IT/Security

Tools

Azure AD

Okta

SailPoint

Ping Federate

SCIM

RBAC

Job description

Creative Artists Agency (CAA) in Nashville is seeking a Cybersecurity Architect focused on IAM to design, implement, and govern identity and access across cloud and on-premise systems. The role emphasizes secure design principles, SaaS integrations, and automation of deployment pipelines.

You will partner with security and IT teams to advance enterprise security and identity governance. You will drive identity platform development, create scalable IAM workflows, and contribute to incident