Identity & Access Architect — IAM Strategy & Zero Trust

3M; Minnesota; On-site; USD 222,000 - 271,000; Full time

Job summary

3M is seeking a Cybersecurity Identity Architect to lead design and implementation of enterprise IAM across cloud and on-prem environments, aligning with business goals and regulatory requirements.

This role emphasizes zero-trust principles, collaboration with IT, cybersecurity, and business teams, and driving modernization of identity services with modern technologies. The position requires on-site work at the 3M Center in Maplewood, MN or Austin, TX, with up to 5% travel.

Qualifications

• Bachelor’s degree in Cybersecurity or Computer Science.
• 10 years experience in enterprise identity management in a private, public, government or military environment.

Responsibilities

• Architect and design scalable IAM solutions including SSO, MFA, identity federation, and privileged access management.
• Develop identity architecture blueprints, standards, and roadmaps.
• Collaborate with engineering, compliance, and business teams to translate security requirements into technical designs, including authorization mappings.
• Collaborate with detection and response teams and the scaling of ITDR services.
• Lead technical evaluations of IAM tools and platforms, and oversee their integration.
• Partner with cybersecurity engineers and architects on integrating IAM into the IT and cybersecurity tooling ecosystem (e.g. SOC, Data Security, AI, Network, etc.)
• Ensure new identity solutions align with zero trust principles, data protection policies, and compliance frameworks (e.g., NIST, ISO, GDPR)
• When required, provide technical leadership to incident response and identity-related threat mitigation
• Stay current with emerging IAM technologies, trends, and threats
• Evaluate and incorporate emerging technologies such as passwordless authentication, continuous adaptive trust, or AI-driven access decisions while creating and optimizing associated process with associated teams
• Manage vendor relationships
• Define KPIs and metrics with IAM Program lead to measure IAM program effectiveness

Skills

IAM design

Stakeholder engagement

Cloud security

Zero trust

Regulatory compliance

Education

Bachelor’s degree in Cybersecurity or Computer Science

Tools

Azure AD / Entra

Saviynt

CyberArk

OAuth / SAML / OIDC

API gateways (mTLS, SPIFFE)

Job description

3M is seeking a Cybersecurity Identity Architect to lead design and implementation of enterprise IAM across cloud and on-prem environments, aligning with business goals and regulatory requirements.

This role emphasizes zero-trust principles, collaboration with IT, cybersecurity, and business teams, and driving modernization of identity services with modern technologies. The position requires on-site work at the 3M Center in Maplewood, MN or Austin, TX, with up to 5% travel.