Senior IAM Architect: Enterprise Identity Platform Leader

Openkrill; United States; Remote; USD 190,000 - 270,000; Full time

Benefits offered by this job

Medical, Dental & Vision plans

Flexible PTO

401(k) with company match

Life Insurance & Pet insurance

Job summary

OpenLoop is seeking a Sr. Staff IAM Architect to unify and govern identity across workforce, external users, and AI agents. You will own Auth0 customer identity and drive a global, secure, platform-wide identity strategy.

You will lead architecture decisions, write clear design records, and collaborate with security to embed identity risk management into the production posture. This is a hands-on architecture role with significant impact.

Qualifications

• 8+ years in identity and access management, security engineering, or platform architecture with 3+ years in staff/principal/architect roles.
• Hands-on customer identity experience; designed/delivered a CIAM platform (Auth0) end-to-end including tenant modelling, MFA, and machine-to-machine auth.
• Strong command of federation and authentication protocols: SAML, OIDC, OAuth 2.0, SCIM, WebAuthn, FIDO2.
• Experience with enterprise workforce IdP architecture (Okta or equivalent) and migrations off legacy solutions.
• Ability to set architectural direction and drive adoption without direct authority.
• Clear written communication, architecture decision records, and reference designs.

Responsibilities

• Own the target-state identity architecture across workforce, non-employee, external, non-human, and AI agent identity types and set standards.
• Own the Auth0 customer identity architecture end to end, including tenant/organization modelling, MFA, and machine-to-machine patterns.
• Keep customer/patient identity plane separate from workforce plane and define interfaces.
• Consolidate remaining authentication paths onto a single workforce IdP and define patterns.
• Design SSO, SCIM provisioning, and automated deprovisioning with auditable evidence.
• Define federation/directory architecture across Okta, Entra ID, AWS, and GCP.
• Build Identity Security Posture Management, extend posture warehouse, and define metrics.
• Collaborate with Security Operations/Architecture to embed identity threat detection in SIEM.
• Design access controls meeting HIPAA/HITRUST/SOC 2 without manual overhead.
• Serve as design authority between identity risk surface and remediation teams.

Skills

IAM expert

Auth0 CIAM

Federation protocols

Okta/workload IdP

Architectural leadership

Clear written comms

Tools

Terraform

SailPoint ISC/NERM

Job description

OpenLoop is seeking a Sr. Staff IAM Architect to unify and govern identity across workforce, external users, and AI agents. You will own Auth0 customer identity and drive a global, secure, platform-wide identity strategy.

You will lead architecture decisions, write clear design records, and collaborate with security to embed identity risk management into the production posture. This is a hands-on architecture role with significant impact.