IAM Security Architect: Zero-Trust & Cloud Identity Leader

Global Sports Jobs Limited; Nashville (TN); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Eligible for benefits

Discretionary bonus

Job summary

Creative Artists Agency (CAA) in Nashville, TN seeks a Cybersecurity Architect to lead IAM design, secure identity flows, and drive cloud-first security in a SaaS-enabled environment. You will develop reference architectures, standards, and governance for access management, collaborating with HRIS, IT service owners, and end users to implement scalable solutions.

This hands-on role requires strong communication and deep IAM expertise to advance zero-trust principles across both on-prem and cloud

Qualifications

• 7+ years in IT with a security focus.
• 3+ years IAM Architecture/Engineering.
• Bachelor’s or Master’s Degree in a relevant field.
• Experience architecting IAM projects end-to-end.
• Strong communication and presentation skills.
• Experience designing and supporting Zero Trust Identity architecture.
• Understanding of OAuth, SAML and OpenID frameworks.
• Knowledge of servers, OS, networks, firewalls, cloud apps, and infrastructure.
• Automation and SaaS integration experience.
• Lifecycle management and provisioning/de-provisioning knowledge.
• MFA and compensating controls knowledge.
• Privileged Identity Management, just-in-time provisioning concepts, least privilege.
• Scripting in PowerShell, Python, or JavaScript.

Responsibilities

• Maintain IAM diagrams and workflows.
• Design, evaluate IAM programs to support company strategy.
• Develop standards and guidelines for access management.
• Manage user lifecycle provisioning/de-provisioning and audits.
• Collaborate with HRIS, IT service owners, service desk, and end-users.
• Present design and vision meeting user and business needs.
• Design structure for cloud and on-prem apps in IAM platform.
• Create identity governance workflows with attestation/auditing.
• Ensure systems are scalable and maintainable.
• Create documentation to support architectural decisions.
• Review identity workflows for lifecycle management, governance, reporting, self-service.
• Design RESTful Identity as a Service API.
• Contribute to security incident response.

Skills

IAM Architecture

Zero Trust

OAuth/SAML/OpenID

Scripting (PowerShell/Python/JavaS

Automation & SaaS integration

Cloud/On-Prem Infrastructure

Communication & Presentation

Provisioning/De-provisioning

Privileged Access Management

Just-in-time access

Education

Bachelor’s or Master’s Degree in a relevant field

Tools

Azure AD

Okta

SailPoint

Ping Federate

PowerShell

Job description

Creative Artists Agency (CAA) in Nashville, TN seeks a Cybersecurity Architect to lead IAM design, secure identity flows, and drive cloud-first security in a SaaS-enabled environment. You will develop reference architectures, standards, and governance for access management, collaborating with HRIS, IT service owners, and end users to implement scalable solutions.

This hands-on role requires strong communication and deep IAM expertise to advance zero-trust principles across both on-prem and cloud