Identity Architect

Insight Global; Saint Paul (MN); On-site; USD 130,000 - 190,000; Full time

Job summary

Insight Global is seeking an experienced Senior Identity Architect to define and maintain the target-state enterprise identity architecture across IAM, IGA, PAM, directories, federation, and authentication/authorization. You will establish standards, guardrails, and decision frameworks to enable secure, repeatable implementations across teams.

You will partner with platform owners, engineering, audit, risk, compliance, and security operations to align identity capabilities with business

Qualifications

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, business, or related discipline.
• 10+ years of IT, cybersecurity, infrastructure, or identity & access management.
• 5+ years designing or governing enterprise identity solutions in hybrid or cloud environments.
• Experience with AD, Entra ID, IGA, PAM, SSO, federation, and certificate lifecycle management.
• Translate security, audit, compliance, and operational requirements into architecture standards.
• Strong understanding of identity lifecycle, access governance, and least privilege.
• Ability to evaluate risk, document decisions, and influence multiple teams.
• Excellent communication with technical and business stakeholders.
• Experience with human, privileged, service, and non-human identities.

Responsibilities

• Define and maintain target-state enterprise identity architecture across IAM, IGA, PAM, directories, federation, authentication, authorization, and external identity platforms.
• Establish architecture patterns, standards, guardrails, and decision frameworks for secure, repeatable implementations.
• Serve as design authority for identity solutions introducing new access models, trust boundaries, or audit implications.
• Partner with platform owners, engineering, audit, risk, compliance, and security operations to align identity with business requirements.
• Drive integration across identity platforms so lifecycle, access governance, and audit evidence operate cohesively.
• Translate audit findings and control gaps into architectural improvements.
• Guide modernization across cloud identity, privileged access, identity governance, and directory security.
• Develop roadmaps for identity platform evolution, transitions, and risk reduction.
• Provide architectural direction for incident response and remediation planning.
• Communicate decisions, risks, and tradeoffs clearly to teams and leadership.

Skills

Enterprise IAM/IGA

Identity architecture

PAM and SSO

Active Directory/Microsoft Entra ID

OAuth/OIDC/SAML/SCIM

RBAC/least privilege

Audit evidence & SOX

Cross-functional collaboration

Security architecture

Cloud identity modernization

Education

Bachelor’s degree in CS/IS/cybersecurity or related

Tools

Saviynt

BeyondTrust

Job description

Job Description

• Define and maintain target-state enterprise identity architecture across IAM, IGA, PAM, directories, federation, authentication, authorization, certificate lifecycle, and external identity platforms.
• Establish identity architecture patterns, standards, guardrails, and decision frameworks that support secure and repeatable implementation across teams.
• Serve as the design authority for identity-related solutions that introduce new access models, integrations, trust boundaries, privileged access paths, or audit implications.
• Partner with platform owners, engineering teams, application teams, audit, risk, compliance, and security operations to align identity capabilities with business and regulatory requirements.
• Drive integration across identity platforms so lifecycle, access governance, privileged access, authentication, and audit evidence operate as a cohesive enterprise ecosystem.
• Translate audit findings, control gaps, operational issues, and security risks into sustainable architectural improvements.
• Guide modernization efforts across cloud identity, privileged access, identity governance, directory security, external identity, and non-human identity management.
• Develop and maintain roadmaps for identity platform evolution, including technology transitions, capability rationalization, automation opportunities, and risk reduction priorities.
• Provide architectural direction for incident response, major identity issues, remediation planning, and root-cause prevention.
• Communicate identity architecture decisions, risks, tradeoffs, and recommendations clearly to technical teams, leadership, and business stakeholders.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, business, or related discipline.
• 10+ years of experience in information technology, cybersecurity, infrastructure, application security, or identity and access management.
• 5+ years of experience designing or governing enterprise identity solutions in complex hybrid or cloud environments.
• Experience with identity solutions and architecture across areas such as Active Directory, Microsoft Entra ID, identity governance and administration, privileged access management, single sign-on, federation, conditional access, certificates, and external customer identity.
• Experience translating security, audit, compliance, and operational requirements into practical architecture standards and implementation guidance.
• Strong understanding of identity lifecycle processes, access governance, privileged access models, authentication flows, authorization concepts, role-based access, and least privilege principles.
• Ability to evaluate technical risk, define architectural options, document decisions, and influence stakeholders across multiple teams.
• Effective communication skills with the ability to engage technical teams, business partners, audit partners, vendors, and leadership.
• Experience with platforms or capabilities such as Microsoft Entra ID, Active Directory, Saviynt or similar IGA tools, BeyondTrust or similar PAM tools, certificate lifecycle management, external identity, and directory security recovery or monitoring solutions.
• Experience leading identity modernization, platform migration, rationalization, or decommissioning efforts.
• Knowledge of SOX, ITGC, SOC, audit evidence automation, access certifications, segregation of duties, and control design.
• Experience designing identity solutions for human identities, privileged identities, service accounts, application identities, certificates, and other non-human identities.
• Familiarity with automation, APIs, scripting, JSON, OAuth, OIDC, SAML, SCIM, LDAP, Kerberos, and modern cloud identity patterns.
• Demonstrated ability to balance security, usability, scalability, cost, resiliency, and auditability in enterprise architecture decisions.
• Experience working in a global, matrixed, regulated, or highly distributed technology environment.