Identity & Access Architect: Cloud, Zero Trust Leader

Crowe; San Francisco (CA); On-site; USD 105,000 - 214,000; Full time

Job summary

Crowe is seeking an IAM Architect to lead strategic identity and access management initiatives across cloud, on-premises, and hybrid environments. You will design reference architectures, guide clients in modern authentication, and ensure effective governance and provisioning processes.

In this consulting role, you’ll collaborate with security, cloud, and application teams, influencing strategic security outcomes while growing Crowe's IAM capabilities and client delivery.

Qualifications

• 7+ years of IAM, cybersecurity architecture, or related roles (consulting or industry).
• Proven experience designing and implementing enterprise IAM solutions across cloud and hybrid environments.
• Strong knowledge of authentication and federation standards (OAuth2, OIDC, SAML, SCIM, LDAP).
• Experience with identity governance, privileged access management, and identity lifecycle processes.
• Hands-on experience with leading IAM tools such as Entra ID, SailPoint, Saviynt, CyberArk, Okta, or similar.
• Familiarity with Zero Trust principles and modern identity security approaches (MFA, passwordless, RBAC/ABAC).
• Experience with API-based integrations and identity data flows (REST APIs, JSON).
• Experience supporting or leading IAM implementations, transformations, or program development efforts.

Responsibilities

• Lead IAM strategy development, roadmap creation, and reference architecture design aligned to client objectives.
• Define and deliver enterprise IAM architecture across cloud, on-premises, and hybrid environments.
• Advise on Zero Trust principles and identity-centric security strategies.
• Present IAM strategies and findings to technical and executive stakeholders including C-suite.
• Architect IAM platforms integration with applications, directories, APIs, and DevOps pipelines.
• Provide guidance on modern authentication and authorization approaches (SSO, MFA, passwordless).
• Lead or support implementation of identity governance, provisioning, and privileged access controls.
• Collaborate with clients to accelerate onboarding and adoption of IAM capabilities; gather requirements and enablement.

Skills

IAM

Cybersecurity architecture

Zero Trust

OAuth2/OIDC/SAML

REST APIs

Scripting (Python/SQL)

Stakeholder management

Education

Bachelor’s degree in Information Systems/CS/Cybersecurity/Engineering

Tools

Entra ID (Azure AD)

SailPoint

Saviynt

CyberArk

Okta

Ping Identity

Job description

Crowe is seeking an IAM Architect to lead strategic identity and access management initiatives across cloud, on-premises, and hybrid environments. You will design reference architectures, guide clients in modern authentication, and ensure effective governance and provisioning processes.

In this consulting role, you’ll collaborate with security, cloud, and application teams, influencing strategic security outcomes while growing Crowe's IAM capabilities and client delivery.