Senior IAM Architect: Identity Security & Modernization

UKG; Lowell (MA); On-site; USD 146,000 - 209,000; Full time

Job summary

UKG is seeking an experienced Identity & Access Management Architect to define, design, and evolve the identity security architecture across our global workforce and cloud platforms. You will act as a technical authority, partnering with Security Engineering and Platform teams to deliver scalable, secure IAM solutions.

Responsibilities include shaping enterprise IAM references, provisioning and deprovisioning workflows, and implementing robust RBAC/ABAC models while aligning with SOC, ISO 27001,

Qualifications

• Minimum 8+ years in Identity & Access Management or security architecture roles.
• 3+ years designing enterprise IAM architectures.
• Deep expertise in IGA, PAM, lifecycle management, and authentication/authorization frameworks.

Responsibilities

• Define and maintain enterprise IAM reference architectures, standards, and design patterns.
• Develop scalable identity and access management solutions.
• Partner with stakeholders to align identity capabilities with security objectives.
• Evaluate emerging identity tech and recommend improvements.
• Design and optimize identity lifecycle management processes including provisioning and deprovisioning.
• Develop scalable RBAC and ABAC models across enterprise apps and platforms.
• Ensure identity governance aligns with security, compliance, and business needs.
• Support IGA platform implementation and enhancements.
• Drive modernization of authentication services and identity providers.
• Develop secure patterns for workforce, partner, and third-party access.
• Design privileged access architectures across cloud, infra, and apps environments.
• Enable just-in-time access, credential vaulting, and privileged account governance.
• Reduce standing privilege and enforce least privilege principles.
• Improve core identity services' security and scalability.
• Perform security reviews and threat modeling for identity initiatives.
• Support SOC, ISO 27001, PCI and privacy compliance.

Skills

IGA

PAM

Auth frameworks

Cloud identity

SAML/OIDC/OAuth

RBAC/ABAC

IaC/DevSecOps

Stakeholder comms

Education

Bachelor's degree in CS/Cybersecurity/IS

Tools

Saviynt

SailPoint

Okta

CyberArk

BeyondTrust

Ping Identity

Job description

UKG is seeking an experienced Identity & Access Management Architect to define, design, and evolve the identity security architecture across our global workforce and cloud platforms. You will act as a technical authority, partnering with Security Engineering and Platform teams to deliver scalable, secure IAM solutions.

Responsibilities include shaping enterprise IAM references, provisioning and deprovisioning workflows, and implementing robust RBAC/ABAC models while aligning with SOC, ISO 27001,