Identity Management Architect

WiredHive, Inc.; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

WiredHive, Inc. is seeking an Identity Engineer to develop IAM solutions across AWS, Azure, OCI, and GCP. You will design policies, manage non-human identities, and implement least-privilege controls for secure, scalable access across environments.

You will also build AI-enabled identity workflows, automate credential lifecycles, and integrate standards like OAuth and SAML into the architecture.

Qualifications

• 5+ years of hands-on identity and access management engineering experience.
• Experience authoring custom IAM policies and roles across cloud platforms.
• Hands-on Entra ID, SSO, MFA, and on-premises AD administration.
• Familiarity with cross-cloud federation and least-privilege design.

Responsibilities

• Lead multi-cloud IAM engineering across AWS, Azure, OCI, and GCP.
• Design and maintain IAM policies, roles, trust relationships, and boundaries.
• Govern non-human identities and automate identity workflows.
• Develop identity automation using IaC and CI/CD tooling.

Skills

IAM engineering

AWS & Azure IAM

Entra ID

SAML/OIDC

Terraform

PowerShell/Python

Education

Bachelor's degree in CS/InfoSec or related field

Tools

Azure CLI

CI/CD pipelines

Job description

This role is responsible for developing solutions for Identity and Access Management with Azure, AWS and OCI. Integrate current architectures, create technical documentation, and works with business to provide technical support. There is a strong focus on Identity security as well as on automation and workflow processes.

What You'll Do

Multi-Cloud Identity Engineering

• Heavy involvement in cross-tenant identity mapping, UPN and domain moves, coexistence through cutover.
• Design, author, and maintain custom IAM policies, roles, permission boundaries, and trust relationships across AWS (IAM, IAM Identity Center, STS), Azure (Entra ID, RBAC, PIM), OCI (IAM domains, policies, dynamic groups), and GCP (IAM, Workload Identity Federation), with AWS as the deepest area of expertise.
• Apply least-privilege and zero-trust principles to human, service, and workload identities, including cross-account and cross-cloud federation patterns.
• Design and govern non-human identities: service principals, managed identities, service accounts, workload identities, and API credentials across all four clouds.

AI-Enabled and Agentic Identity Solutions

• Architect and build identity solutions for AI agents and agentic workflows, including secure credential issuance, scoped delegation, token lifecycle management, and auditability for autonomous and semi-autonomous systems.
• Evaluate and integrate emerging standards and tooling for machine and agent identity (e.g., workload identity federation, OAuth token exchange, fine-grained authorization) into Quanta's identity architecture.
• Leverage AI tooling to automate identity operations, access reviews, and anomaly detection where appropriate.

Entra ID, SSO, and Active Directory

• Configure and maintain Entra ID single sign-on via application registrations and enterprise applications using SAML, OIDC, and OAuth/Microsoft Graph API.
• Manage Conditional Access policies, Azure MFA, and hybrid identity via Entra Connect (Azure AD Connect), including monitoring and troubleshooting synchronization.
• Administer the enterprise AD forest/domain and domain controllers: Group Policy, replication, sites and subnets, and account lifecycle in accordance with security, privacy, and regulatory best practices.
• Provide engineering support for Azure Virtual Desktop identity integration, including app registrations.

DNS and PKI

• Configure and maintain internal and public DNS, including cloud-hosted zones and hybrid resolution architectures.
• Administer enterprise PKI / Active Directory Certificate Services, including certificate issuance, renewal automation, and certificate lifecycle management for applications, infrastructure, and workload identities.

Automation and Integration

• Build and manage identity infrastructure as code using tools such as Terraform, Azure CLI, PowerShell, and CI/CD pipelines.
• Develop API-driven integrations (Microsoft Graph, AWS APIs, REST) for cross-application interoperability and automated identity workflows.
• Create best-practice documentation and runbooks to be leveraged by infrastructure and security teams.
• What You'll Bring5+ years of hands-on identity and access management engineering experience, including demonstrable experience authoring custom IAM policies and roles/permission sets in AWS and Azure.
• Hands-on experience administering Entra ID (Conditional Access, app registrations, SSO, MFA) and on-premises Active Directory.
• Bachelor's degree in computer science, Information Security, or related field, or equivalent experience.

LICENSES / CERTIFICATIONS (preferred):

Microsoft SC-300 (Identity and Access Administrator) or equivalent

AWS Certified Security - Specialty or AWS Solutions Architect

KNOWLEDGE AND SKILLS:

• Expert-level understanding of authentication and authorization protocols: SAML, OIDC, OAuth 2.0, SCIM, Kerberos, LDAP.
• Strong scripting and automation skills: PowerShell, Python; infrastructure as code (Terraform preferred).
• Working knowledge of DNS architecture (internal/public, hybrid resolution) and PKI/certificate lifecycle management (ADCS).
• Experience using API integrations (Microsoft Graph, cloud-native APIs, REST) for cross-application interoperability.
• Familiarity with privileged access management, identity governance (IGA), and access certification concepts.
• Strong documentation skills and the ability to communicate technical designs to engineering and business stakeholders