Principal IAM Architect — Agentic Identity Lead

Nordstrom; Seattle (WA); Hybrid; USD 191,000 - 297,000; Full time

Benefits offered by this job

Medical/Vision, Dental, Retirement

Merchandise Discount

Job summary

Nordstrom's Cybersecurity & Privacy Organization is seeking a Principal Security Engineer in Seattle to drive IAM strategy across workforce, customer, and agentic identities. This hybrid role requires on-site presence at Nordstrom corporate headquarters at least 4 days per week.

You will design enterprise IAM solutions, define governance, and mentor IAM engineers while partnering with platform, AI/ML, and application teams to enable secure, least-privilege access and auditable agentic identity

Qualifications

• Bachelor's degree in Computer Science or related field; Master's preferred.
• 12+ years in information security with 5+ years in IAM leadership.
• Experience architecting IAM in large enterprises with cloud and on-premise components.
• Proficiency with IAM tools: IGA, PAM, SSO/federation, and identity threat tools.
• Experience designing non-human identities (machine/service accounts, AI agents).

Responsibilities

• Lead design and architecture of enterprise IAM across cloud, on-premises, and hybrid environments.
• Set technical direction for zero trust identity and agentic identity programs.
• Advise security leadership and engineering on identity risk and architecture.
• Drive automation to scale provisioning and access reviews.
• Partner with AI/ML and DevSecOps to implement agentic identity controls.

Skills

IAM

Cloud IAM

Agentic identity

Identity governance

PAM

CI/CD identity

OAuth 2.0 / OIDC

SAML

Non-human identities

Mentoring

Education

Bachelor's degree in Computer Science, Information Security, Engineering, or related field

Master's degree preferred

Tools

IGA platforms

PAM solutions

SSO / federation

Identity orchestration

Job description

Nordstrom's Cybersecurity & Privacy Organization is seeking a Principal Security Engineer in Seattle to drive IAM strategy across workforce, customer, and agentic identities. This hybrid role requires on-site presence at Nordstrom corporate headquarters at least 4 days per week.

You will design enterprise IAM solutions, define governance, and mentor IAM engineers while partnering with platform, AI/ML, and application teams to enable secure, least-privilege access and auditable agentic identity