Principal IAM Architect & Strategy Leader

Blackhawk Network; Pleasanton (CA); Hybrid; USD 170,360 - 230,000; Full time

Benefits offered by this job

Hybrid work schedule

401(k) with employer match

Health, dental, vision insurance

Paid holidays and sick leave

Parental leave and life insurance

Job summary

Blackhawk Network in Pleasanton, CA seeks a Principal IAM Engineer to shape the identity governance program and lead strategic IAM initiatives. You will architect and implement IAM across a complex, multi-domain environment, driving security, compliance, and operational efficiency.

You’ll partner with Compliance, Security and IT Ops while mentoring staff and exploring zero trust, passwordless, and modern authentication approaches to keep the program forward-looking.

Qualifications

• BA + 12+ years in identity and access management or equivalent.
• Expert-level understanding of IAM principles and RBAC, IGA, PAM.
• Proven ability to architect IAM in multi-domain environments with legacy systems.
• Strong knowledge of compliance frameworks (PCI DSS, SOC2, NYDFS) and IAM controls.
• Excellent communication and stakeholder influence without direct authority.

Responsibilities

• Leads the strategy and direction of the IAM program as principal architect.
• Establishes IAM standards across lifecycle management, IGA, PAM, and entitlements.
• Designs IAM solutions consolidating multiple AD domains and Okta tenants.
• Provides vision for authentication, authorization, provisioning and access governance.
• Collaborates with Compliance, Security and IT Ops to meet regulatory objectives.
• Develops access workflows and identity governance processes for efficiency.
• Mentors IT staff on IAM principles and upskills teams.
• Evaluates emerging IAM technologies to keep the organization at the forefront.

Skills

IAM expertise

Leadership without direct reports

Excellent communication

AI fluency

Stakeholder influence

Education

Bachelor's degree

Tools

Okta

Active Directory

Azure AD

SAML/OAuth/OIDC/SCIM

Kerberos

ServiceNow

Job description

Blackhawk Network in Pleasanton, CA seeks a Principal IAM Engineer to shape the identity governance program and lead strategic IAM initiatives. You will architect and implement IAM across a complex, multi-domain environment, driving security, compliance, and operational efficiency.

You’ll partner with Compliance, Security and IT Ops while mentoring staff and exploring zero trust, passwordless, and modern authentication approaches to keep the program forward-looking.