Senior IAM Architect — Enterprise Identity & Access

Finance of America; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Paid time off

401(k) with employer match

Employee ESPP

Job summary

Finance of America seeks a senior IAM engineer to lead the architecture, engineering, and automation of enterprise identity services. You will drive RBAC, IGA, and Zero Trust initiatives across AD, Entra ID, and cloud platforms, partnering with Security, Infrastructure, and Compliance to strengthen controls.

The role requires 7+ years in IAM and certifications like SC-300, CISSP, or CISM, plus hands-on scripting and integration experience with HRIS/ITSM systems.

Qualifications

• Minimum 7 years of IAM, Identity Engineering, Cybersecurity Engineering, or related work.
• SC-300, CISSP, CISM, or equivalent certifications.
• Deep expertise in AD, Microsoft Entra ID, authentication, federation, RBAC, and access governance.
• Advanced PowerShell scripting and automation experience.
• Experience evaluating or implementing IGA solutions.
• Experience designing IAM integrations using APIs and workflow platforms.
• Ability to independently lead enterprise technical initiatives.
• Excellent communication and stakeholder management skills.
• Experience with SailPoint, Omada, Saviynt or similar IGA platforms.
• Experience integrating HRIS and ITSM into IAM workflows.
• Knowledge of Zero Trust architectures.

Responsibilities

• Serve as senior technical lead and SME for enterprise IAM technologies.
• Own the IAM program technical direction and engineering roadmap.
• Establish IAM architecture standards and implementation patterns.
• Lead design reviews and provide architectural guidance.
• Evaluate emerging IAM technologies and investments.
• Design IAM solutions across AD, Entra ID, cloud, and apps.
• Lead automation initiatives using PowerShell, APIs and workflows.
• Design integrations between HR systems, ITSM, IAM, and apps.
• Reduce manual effort through automation and self-service.
• Lead RBAC and entitlement governance programs.
• Develop scalable access models supporting least privilege and compliance.
• Evaluate and implement IGA platforms.
• Design lifecycle processes for onboarding, transfers, terminations.
• Improve provisioning, deprovisioning, and access reviews via automation.
• Lead privileged access governance, SSO, MFA, federation, and Zero Trust.
• Ensure IAM controls meet regulatory and cybersecurity requirements.
• Partner with Security Architecture to strengthen identity controls.
• Develop IAM standards and engineering documentation.
• Serve as escalation point for complex IAM issues.
• Drive continuous process improvement and maturity.

Skills

IAM

Identity engineering

RBAC

Zero Trust

Automation

Security governance

Leadership

Stakeholder management

Enterprise architecture

Communication

Education

Bachelor's Degree

Tools

PowerShell

APIs

SailPoint

Omada

Saviynt

Microsoft Entra ID

Job description

Finance of America seeks a senior IAM engineer to lead the architecture, engineering, and automation of enterprise identity services. You will drive RBAC, IGA, and Zero Trust initiatives across AD, Entra ID, and cloud platforms, partnering with Security, Infrastructure, and Compliance to strengthen controls.

The role requires 7+ years in IAM and certifications like SC-300, CISSP, or CISM, plus hands-on scripting and integration experience with HRIS/ITSM systems.