Lead IAM Architect/ Engineer

Glocomms; Chicago (IL); In loco; USD 140.000 - 180.000; Tempo pieno

Descrizione del lavoro

Glocomms, partnering with a leading financial services firm in Chicago, is seeking an Identity and Access Management Architect to design and drive modernization.

You will lead migration to federated identity, build PoCs, evaluate solutions, and shape secure auth for apps, APIs, and machines, collaborating with security, compliance, and engineering teams.

This role demands senior architectural vision, vendor management, and the ability to balance security with reliability and user experience.

Competenze

• Proven expertise in IAM architecture and modern authentication protocols.
• Experience implementing enterprise identity platforms such as Okta, Azure Entra ID, Ping Identity, ForgeRock.
• Strong software or infra engineering background with IaC and Go or Python.
• Experience securing machine-to-machine authentication and non-human identities.
• Understanding of secrets management, identity federation, certificate-based authentication, and workload identity.
• Proven modernization and migration leadership of legacy identity environments.
• Strong stakeholder management and ability to influence leaders.
• Advanced system design and architecture experience.
• Ability to navigate ambiguity and align identity architectures with governance and compliance.

Mansioni

• Design and lead migration strategy from legacy IAM to a modern federated platform.
• Remain hands-on by building PoC integrations, automation, writing code, and configuring identity services.
• Lead technical evaluations of IAM and governance solutions through practical testing in enterprise environments.
• Design secure authentication and authorization frameworks for applications, APIs, microservices, and machine identities using zero-trust principles.
• Partner with engineering, security, compliance, and business stakeholders to translate security and regulatory requirements into practical technical solutions.
• Define standards for identity integration and ensure seamless identity flows across internally developed and third-party systems.
• Serve as the primary architectural authority for identity modernization efforts, balancing security, scalability, reliability, and user experience.

Conoscenze

IAM architecture

Authentication protocols

Enterprise IAM platforms

IaC & Go or Python

Machine-to-machine auth

Secrets management & federation

Migration & modernization

Stakeholder management

Advanced system design

Ambiguity navigation

Descrizione del lavoro

Glocomms is partnering with a leading financial services firm to expand out their Identity and Access Management team.

• Design and lead the migration strategy from legacy identity and access management capabilities to a modern federated identity platform.
• Remain hands-on by building proof-of-concept integrations, developing supporting automation, writing code, and configuring identity services.
• Lead technical evaluations of identity, access management, and governance solutions through practical testing in complex enterprise environments.
• Design secure authentication and authorization frameworks for applications, APIs, microservices, and machine identities using zero-trust principles.
• Partner with engineering, security, compliance, and business stakeholders to translate security and regulatory requirements into practical technical solutions.
• Define standards for identity integration and ensure seamless identity flows across internally developed and third-party systems.
• Serve as the primary architectural authority for identity modernization efforts, balancing security, scalability, reliability, and user experience.

Required Qualifications

• Deep expertise in Identity and Access Management (IAM) architecture and modern authentication protocols, including OIDC, OAuth 2.0, SAML, JWT, and related token-based frameworks.
• Experience designing and implementing enterprise identity platforms such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, or similar technologies.
• Strong software engineering or infrastructure engineering background with proficiency in Infrastructure as Code and at least one programming language such as Go or Python.
• Experience securing machine-to-machine authentication and managing non-human identities across cloud and distributed environments.
• Strong understanding of secrets management, identity federation, certificate-based authentication, and workload identity solutions.
• Proven experience modernizing legacy identity environments and leading complex migration initiatives.
• Strong stakeholder management skills with the ability to influence engineering, security, compliance, and business leaders.
• Advanced system design and architecture experience, including the ability to create and defend technical solutions for highly complex environments.
• Ability to navigate ambiguity and align identity architectures with security, governance, risk, and compliance requirements.