Senior Enterprise IAM & Zero Trust Architect

KLA; Milpitas (CA); On-site; USD 138,000 - 234,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) + company match

ESP P program

Tuition reimbursement

Paid time off

Job summary

KLA is seeking a Sr. Enterprise Identity Architect to lead the design and modernization of enterprise identity security across on-prem and cloud environments in Milpitas, CA.

You will shape IAM, IGA, SSO, and PIM strategies, drive Zero Trust initiatives, and collaborate with cross-functional teams to implement scalable, secure identity solutions. The role requires 8+ years in large enterprises, hands-on experience with Ping/Okta/Azure EntraID, and knowledge of regulatory frameworks.

Qualifications

• Eight+ years in large enterprise IT with identity solutions.
• Strong experience with IAM/IGA/PIM, SSO, and cloud identity.
• Experience with multi-cloud security architectures (AWS, GCP).
• SOX, HIPAA, PCI, ISO 27001, or NIST knowledge; security certifications a plus.

Responsibilities

• Develop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.
• Establish identity standards and reference architectures for on-prem and cloud environments.
• Define and drive Zero Trust identity strategy and modern authentication roadmap.
• Assess identity risk posture and recommend controls aligned with business requirements.
• Architect identity lifecycle and governance solutions including access certification and automation.
• Lead integration of IGA with HR systems, AD/Entra ID, and cloud apps.

Skills

IAM

IGA

PIM

SSO

Zero Trust

Entra ID

Tools

Ping

Okta

Azure EntraID

Job description

KLA is seeking a Sr. Enterprise Identity Architect to lead the design and modernization of enterprise identity security across on-prem and cloud environments in Milpitas, CA.

You will shape IAM, IGA, SSO, and PIM strategies, drive Zero Trust initiatives, and collaborate with cross-functional teams to implement scalable, secure identity solutions. The role requires 8+ years in large enterprises, hands-on experience with Ping/Okta/Azure EntraID, and knowledge of regulatory frameworks.