Identity Architect

Finance of America; United States; On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Paid time off

Flexible spending account

401(k) with employer match

Employee stock purchase plan

Job summary

Finance of America is seeking an experienced IAM Architect to lead enterprise identity and access management efforts. You will drive architecture, governance, automation, and integration across AD, Microsoft Entra ID, and cloud apps while ensuring regulatory compliance.

The role requires senior technical leadership, a strong background in RBAC and IGA, and a track record of delivering scalable identity solutions. Collaboration with Security, Infrastructure, and Compliance is essential.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• Minimum 7 years of experience in IAM, Identity Engineering, Cybersecurity Engineering, or related disciplines.
• Deep expertise in AD, Microsoft Entra ID, authentication, federation, RBAC, and access governance.
• Advanced PowerShell scripting and automation experience.
• Experience evaluating or implementing Identity Governance and Administration (IGA) solutions.
• Experience designing enterprise IAM integrations using APIs and workflow platforms.
• Demonstrated ability to independently lead enterprise technical initiatives.
• Excellent communication, organizational, and stakeholder management skills.

Responsibilities

• Serve as the senior technical lead for enterprise IAM technologies and services.
• Own the technical direction and engineering roadmap for the IAM program.
• Establish IAM architecture standards and engineering best practices.
• Lead technical design reviews and provide architectural guidance across initiatives.
• Evaluate emerging IAM technologies and recommend strategic investments.
• Design IAM solutions across AD, Entra ID, cloud platforms, and enterprise apps.
• Lead automation initiatives using PowerShell, APIs, and orchestration platforms.
• Design integrations between HR systems, ITSM platforms, IAM solutions, and business apps.
• Reduce manual effort through automation and self-service processes.
• Lead RBAC and entitlement governance design and implementation.
• Develop scalable access models supporting least privilege and compliance.
• Evaluate and implement IGA platforms like SailPoint, Omada, or Saviynt.
• Design lifecycle processes for onboarding, transfers, terminations; improve provisioning and access reviews.

Skills

IAM architecture

RBAC

Identity governance

PowerShell

APIs

SailPoint

Omada

Saviynt

Microsoft Entra ID

Active Directory

Zero Trust

Federation

Education

Bachelor's Degree

Tools

PowerShell

Job description

About Us

Finance of America helps homeowners 55+ access the equity they’ve built while staying in full control of their home and their financial future. Through a range of reverse mortgage solutions, we help customers shape the retirement they’ve earned while continuing to evolve how we serve and work together.

Joining Finance of America now means stepping into a period of momentum and growth, with teams actively shaping what comes next and opportunities to make an impact and grow your career.

To learn more about us, visit www.financeofamerica.com

Purpose of Role

Responsible for the architecture, engineering, automation, integration, and continuous improvement of enterprise identity services and access governance capabilities. Serves as the senior technical authority for Finance of America's Identity and Access Management (IAM) program. Provides technical leadership across identity lifecycle management, authentication, authorization, privileged access management, access governance, and identity security initiatives. Working closely with Security, Infrastructure, Enterprise Applications, Compliance, and IAM Operations to design and deliver scalable identity solutions that strengthen security, improve operational efficiency, and support regulatory compliance. Advances the organization's IAM maturity by driving automation, modern identity architecture, role‑based access control (RBAC), privileged access governance, and enterprise‑wide identity integration strategies.

Key Responsibilities and Expectations

• Serves as the senior technical lead and primary subject matter expert for enterprise IAM technologies and services.
• Owns the technical direction and engineering roadmap for the IAM program with minimal oversight.
• Establishes IAM architecture standards, engineering best practices, and implementation patterns.
• Leads technical design reviews and provide architectural guidance across enterprise initiatives.
• Evaluates emerging IAM, Identity Governance (IGA), and security technologies and recommend strategic investments.
• Designs and maintains IAM solutions across Active Directory, Microsoft Entra ID, cloud platforms, and enterprise applications.
• Leads automation initiatives using PowerShell, APIs, orchestration platforms, and workflow technologies.
• Designs integrations between HR systems, ITSM platforms, IAM solutions, and business applications.
• Reduces manual effort through automation, self‑service capabilities, and process optimization.
• Leads the design and implementation of enterprise Role‑Based Access Control (RBAC) and entitlement governance.
• Develops scalable access models and governance standards supporting least privilege and regulatory compliance.
• Evaluates, recommends, and helps implement Identity Governance and Administration (IGA) platforms.
• Designs identity lifecycle processes for onboarding, transfers, role changes, and terminations. Improves provisioning, deprovisioning, certification, and access review processes through automation.
• Leads privileged access governance, service account management, SSO, MFA, federation, and Zero Trust initiatives.
• Ensures IAM controls align with regulatory, audit, and cybersecurity requirements.
• Partners with Security Architecture and Engineering to strengthen enterprise identity controls.
• Develops enterprise IAM standards, operational procedures, and engineering documentation.
• Serves as the highest technical escalation point for complex IAM issues.
• Drives continuous process improvement and organizational maturity across the IAM program.
• Performs other duties as assigned.

Reports To

• Director, IAM

Qualifications - Experience/Skills/Competencies

• Minimum 7 years of experience in IAM, Identity Engineering, Cybersecurity Engineering, or related disciplines.
• SC-300, CISSP, CISM, or equivalent certifications.
• Deep expertise in Active Directory, Microsoft Entra ID, authentication, federation, RBAC, and access governance.
• Advanced PowerShell scripting and automation experience.
• Experience evaluating or implementing Identity Governance and Administration (IGA) solutions.
• Experience designing enterprise IAM integrations using APIs and workflow platforms.
• Demonstrated ability to independently lead enterprise technical initiatives.
• Excellent communication, organizational, and stakeholder management skills.
• Experience with SailPoint, Omada, Saviynt, Microsoft Entra Suite, or similar IGA platforms.
• Experience integrating HRIS and ITSM platforms into IAM workflows.
• Knowledge of Zero Trust architecture and identity security frameworks.

Qualifications - Education - Required

• Bachelor's Degree or comparable qualifications

Qualifications - Education - Field(s)/Profession(s)

• Computer Science, Cybersecurity, Information Technology, or related field.

Compensation

The base salary range for this position is ($120,000 - $140,000) inclusive of all geographical differences in the labor market. The base salary for the position will be determined based on factors such as the candidate’s work location, skills, education, and experience. In addition to those factors, we believe in the importance of pay equity and consider the internal equity of our current team members in determining any final offer. We offer a competitive benefits package including health, dental, vision, life insurance, paid time-off benefits, flexible spending account, 401(k) with employer match, and ESPP.

Additional Information

The application deadline for the job opportunity is 9/21/2026.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.

Finance of America is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, sex (including pregnancy), sexual orientation, religion, creed, age, national origin, physical or mental disability, gender identity and/or expression, marital status, veteran status or other characteristics protected by law.