Identity & Access Security Architect — Hybrid, Zero Trust

Talent Mappers; Illinois; Hybrid; USD 140,000 - 160,000; Full time

Job summary

Talent Mappers is seeking a Senior Identity Security Engineer to design, implement, and operate IAM and access security; covering authentication, authorization, identity governance, privileged access, and Zero Trust controls.

You will collaborate with Security, Infra, Cloud, HR systems and applications to scale identity solutions, automate access, and enforce least privilege in a hybrid role based in Illinois with a 4‑day in‑office work week.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 6+ years in Identity or Security Engineering.
• Experience implementing IAM and Identity Governance solutions.
• Experience with Entra ID, AD, and SaaS identity integrations.
• Experience with Conditional Access, MFA, SAML, OAuth, OpenID Connect, SCIM.

Responsibilities

• Design and implement enterprise IAM solutions.
• Engineer authentication and authorization architectures using SAML, OAuth, OIDC, SCIM.
• Develop RBAC models and automate access reviews.
• Implement Zero Trust controls and integrate with Zscaler ZPA.
• Develop PowerShell, Python, Graph API, REST API, and SCIM automation.
• Build identity provisioning and reporting workflows.
• Provide identity architecture guidance for new applications.

Skills

Identity IAM engineering

Conditional Access / MFA / SSO

SAML

OAuth / OpenID Connect

SCIM

PowerShell

Microsoft Graph

Zero Trust

SaaS integration

NIST CIS Controls familiarity

Education

Bachelor's degree in Computer Science or Information Security

Tools

Entra ID

Active Directory

Job description

Talent Mappers is seeking a Senior Identity Security Engineer to design, implement, and operate IAM and access security; covering authentication, authorization, identity governance, privileged access, and Zero Trust controls.

You will collaborate with Security, Infra, Cloud, HR systems and applications to scale identity solutions, automate access, and enforce least privilege in a hybrid role based in Illinois with a 4‑day in‑office work week.