Lead IAM Solution Architect (Privileged Access & Cloud Identity)

Aquent; Alpharetta (GA); Remote; USD 140,000 - 190,000; Full time

Job summary

Aquent is seeking a Lead IAM Solution Architect to drive design, engineering strategy, and execution of enterprise identity solutions. You will serve as the architectural authority for secure, scalable identity services supporting our digital transformation and collaborate with cybersecurity leadership, cloud engineering, and business stakeholders to mature PAM posture.

This fully remote role requires strong experience with Active Directory, Entra ID, and IAM governance across hybrid

Qualifications

• 5+ years dedicated to Privileged Access Management governance and design.
• 8+ years with Active Directory and related directory services.
• 3+ years architecting Microsoft Entra ID solutions.
• 4+ years implementing IAM controls and compliance practices.

Responsibilities

• Define and maintain enterprise IAM reference architectures and multi-year roadmaps across authentication, authorization, privileged access, and lifecycle management.
• Drive PAM and cloud identity strategy for hybrid environments and identity federation.
• Collaborate with infrastructure, application, and cloud teams to integrate IAM systems across AWS, Azure, and GCP.
• Ensure identity solutions comply with SOX, PCI-DSS, GDPR, NIST, and Zero Trust guidelines.
• Lead tool evaluations, POCs, and procurement analyses for next‑gen IAM products.
• Mentor IT teams on secure integration, coding standards, and lifecycle practices.

Skills

PAM experience

Active Directory

Entra ID

IAM controls

Architectural leadership

Tools

CyberArk

BeyondTrust

HashiCorp

Microsoft Entra ID

Job description

Lead IAM Solution Architect (Privileged Access & Cloud Identity)

Location: Remote (Continental US – working Core EST hours)

Duration: 12-Month Contract (Potential for Extension)

About the Role

The Identity and Access Management (IAM) team is seeking an experienced Lead IAM Solution Architect to drive the design, engineering strategy, and execution of enterprise identity solutions. In this role, you will serve as the architectural authority for secure, scalable, and modern identity services supporting our digital transformation. You will partner closely with cybersecurity leadership, cloud engineering teams, and business stakeholders to define robust IAM roadmaps, mature our Privileged Access Management (PAM) posture, and safeguard modern cloud environments.

Must Haves

• 5+ years Privileged Access Management experience
• 8 years Active directory experience
• 3 years ENTRA experience
• 4 years of understanding of identity and access management controls experience.

(Must show this experience and years of experience at the top of your resume)

Key Responsibilities

• Architectural Leadership: Define and maintain enterprise IAM reference architectures, design patterns, and multi-year strategic roadmaps across authentication, authorization, privileged access, and identity lifecycle management.
• PAM & Cloud Identity Strategy: Drive advanced architectural solutions for Privileged Access Management (CyberArk, BeyondTrust, HashiCorp, etc.) and identity federation across hybrid environments (Active Directory, Microsoft Entra ID).
• Cross-Functional Integration: Partner with infrastructure, application, and cloud teams (AWS, Azure, GCP) to seamlessly integrate enterprise systems, APIs, and SaaS platforms using modern protocols.
• Technical Governance & Compliance: Ensure all identity solutions comply with regulatory standards and frameworks (SOX, PCI-DSS, GDPR, NIST, Zero Trust guidelines).
• Vendor & Tool Evaluation: Lead technical evaluations, proof-of-concepts (POCs), and procurement analyses for next-generation IAM products and tooling.
• Engineering Guidance: Provide technical mentorship to IT implementation teams, establishing best practices for secure integration, coding standards, and lifecycle management.

What You Bring (Minimum Qualifications)

• Identity & Access Management: 4+ years dedicated to defining and implementing enterprise IAM governance and architectural controls.
• Privileged Access Management (PAM): 5+ years hands‑on/architectural experience designing and deploying enterprise PAM frameworks.
• Directory Services & Federation: 8+ years experience with Active Directory and 3+ years architecting Microsoft Entra ID (formerly Azure AD) solutions.
• Standards & Protocols: Strong practical mastery of identity standards including SAML 2.0, OAuth 2.0, OIDC, SCIM, RBAC, and ABAC.

Preferred Qualifications

• Experience architecting identity solutions in multi-cloud environments (AWS, Azure, GCP).
• Familiarity with regulatory frameworks governing financial services (SOX, PCI-DSS).
• Industry certifications such as CISSP, CISM, Certified Identity and Access Manager (CIAM), or vendor-specific certifications (Microsoft, CyberArk).

Our Way of Working

This position is fully remote within the continental United States (requiring core working hours in Eastern Standard Time). While day-to-day operations are remote, occasional travel may be required to a regional Hub or local office for strategic team summits, interactive planning sessions, and culture events.