Senior IAM Architect | Enterprise Identity & Access

Hub International; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401(k) matching

Paid time off

Professional development

Job summary

HUB International is seeking an experienced IAM Architect to design and evolve the enterprise Identity and Access Management program across cloud, SaaS, and on-prem environments. Lead the definition of architecture standards, governance, and scalable identity lifecycle processes, partnering with security, IT, and business stakeholders.

The role requires deep hands-on IAM/IGA experience (SailPoint ISC/IdentityNow, Saviynt, or similar), strong Zero Trust knowledge, and a track record of reducing

Qualifications

• Bachelor's degree in technology, security, or equivalent experience.
• 7+ years in identity and access management, with at least 3 years in architecture/leadership.
• Proven experience designing and implementing enterprise IGA/IAM solutions (e.g., SailPoint ISC/IdentityNow, Saviynt, or similar).
• Experience with access certifications, provisioning workflows, lifecycle management, and governance controls.
• Strong understanding of Zero Trust architecture and enterprise security frameworks.
• Expertise with IGA platforms, AD/EntraID, LDAP, SSO, RBAC, and REST/JSON/XML.
• Experience integrating IAM with HR systems, ITSM tools, cloud platforms; compliant with SOX/HIPAA/GDPR/PCI-DSS.
• Excellent communication for technical and non-technical stakeholders.

Responsibilities

• Lead architecture, design, and integration of IAM/IGA solutions across enterprise environments.
• Define IAM standards, governance models, and best practices.
• Design scalable identity lifecycle processes (Joiner/Mover/Leaver).
• Architect integrations with AD, Azure AD/Entra ID, Workday, ServiceNow, LDAP, SAP, and cloud platforms.
• Maintain IAM diagrams, documentation, and roadmaps; oversee onboarding/provisioning and access certification.
• Provide architecture guidance for compliance, audit readiness and regulatory requirements (SOX, HIPAA, GDPR, PCI-DSS).
• Collaborate with cybersecurity, infra, cloud, and application teams to align IAM with security goals.
• Mentor engineers on IAM best practices and standards; participate in governance discussions.
• Support Agile delivery, roadmaps, governance, and solution architecture reviews.

Skills

IAM architecture

Zero Trust

Security governance

Technical leadership

Communication

Education

Bachelor's degree in technology or security

Tools

SailPoint ISC/IdentityNow

Saviynt

Azure AD/Entra ID

Active Directory

SSO / RBAC / REST APIs

Job description

HUB International is seeking an experienced IAM Architect to design and evolve the enterprise Identity and Access Management program across cloud, SaaS, and on-prem environments. Lead the definition of architecture standards, governance, and scalable identity lifecycle processes, partnering with security, IT, and business stakeholders.

The role requires deep hands-on IAM/IGA experience (SailPoint ISC/IdentityNow, Saviynt, or similar), strong Zero Trust knowledge, and a track record of reducing