IAM Solutions Architect (Contract)

Airitos; United States; Remote; USD 150,000 - 230,000; Full time

Job summary

Airtitos is seeking an IAM Solutions Architect for a remote US-based contract role. You will serve as technical lead on a modernization program, designing a centralized authentication platform and guiding engineering teams through a multi-year transition.

The role requires hands-on architectural expertise, experience with enterprise identity platforms, and strong knowledge of OAuth, OIDC, SAML, and MFA. Prior work in financial services or regulated industries is a plus.

Qualifications

• Over 12 years in IAM architecture for large enterprises.
• Designed centralized authentication platforms at Fortune 150/global scale.
• Experience with OAuth 2.0, OIDC, SAML 2.0, FIDO2/WebAuthn and LDAP/AD.
• Led architecture decisions in complex, multi-stakeholder environments.

Responsibilities

• Lead architecture and design of a centralized next-gen authentication platform.
• Define target-state architecture for credential consolidation across lines.
• Guide integration patterns between identity components and platforms.
• Establish standards for authentication journeys, MFA, and federation.
• Mentor engineering teams and produce ADRs and reference architectures.
• Collaborate with security, infra, and applications to meet compliance and resilience.

Skills

Identity & Access Management

Enterprise architecture

OAuth 2.0

OIDC

SAML 2.0

FIDO2/WebAuthn

LDAP/AD

Identity platforms

API security

Mentoring engineers

Tools

Ping Identity

Transmit Security

ForgeRock

Okta

SailPoint

CyberArk

Job description

Location: Remote, US-based (must be authorized to work in the United States)

Engagement Type: Independent Contractor 1099

Industry: Enterprise / Financial Services

About the Role

We are looking for an IAM Solutions Architect to join a large, complex enterprise organization on a contract basis. You will serve as a technical lead and strategic advisor on the design of a next-generation, centralized authentication platform intended to replace a complex legacy identity system built over the past decade. This is a high-visibility role that requires both hands-on architectural expertise and the ability to guide engineering teams through a multi-year modernization program. The ideal candidate has designed enterprise-scale login and identity systems at Fortune 150 or global enterprise scale and understands the operational realities of running authentication infrastructure in a high-stakes environment. Experience in financial services or other highly regulated industries is a plus.

Key Responsibilities

• Lead the architecture and design of a centralized next-generation authentication platform, built in parallel with the existing production system
• Define the target-state architecture for credential consolidation across multiple business lines and product platforms
• Provide architectural guidance on the identity Abstraction Layer, a vendor-agnostic SDK library designed to decouple applications from underlying identity vendors
• Evaluate and advise on integration patterns between the Transmit platform, Transmit Mosaic (passkeys), Ping Federation, and other identity components
• Establish standards for authentication journeys, session management, MFA flows, and federation across consumer and commercial products
• Partner with security architects, application teams, and infrastructure engineers to ensure the platform meets compliance and resilience requirements
• Review existing identity journeys and connectors; document technical debt and provide remediation recommendations
• Mentor and provide technical direction to engineering teams responsible for building and maintaining the new platform
• Produce architectural decision records (ADRs), reference architectures, and roadmap documentation

Required Qualifications

• 12+ years of experience in Identity and Access Management architecture
• Demonstrated experience designing and delivering enterprise-scale centralized authentication platforms at Fortune 150 or global enterprise scale; financial services or similarly regulated environments a plus
• Deep knowledge of authentication protocols and standards: OAuth 2.0, OIDC, SAML 2.0, FIDO2/WebAuthn, and LDAP/Active Directory
• Hands-on experience with two or more enterprise identity platforms (Transmit Security, Ping Identity, ForgeRock, Okta, SailPoint, CyberArk, or equivalent)
• Experience architecting systems that consolidate credentials or unify identity across multiple applications or business lines
• Strong understanding of API security, token lifecycle management, and session architecture
• Proven ability to lead architecture decisions in complex, multi-stakeholder environments
• Experience with change management processes and operating within enterprise ITSM frameworks

Preferred Qualifications

• Hands-on experience with the Transmit Security platform
• Experience with passkey or FIDO2 implementations at scale
• Familiarity with SDK abstraction or facade design patterns for identity integrations
• Exposure to multi-product credential federation across large, complex enterprises
• Relevant certifications: CISSP, CIAM, Ping Certified Architect, or equivalent
• Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks

Contractor Requirements

• Must be based in the United States and authorized to work without sponsorship
• Must be able to pass a background check