Senior IAM Architect & Platform Lead

OpenLoop Health, Inc.; Northern (KY); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, Dental, Vision plans

Flexible PTO

401(k) + Company Match

Job summary

OpenLoop Health is hiring a Sr. Staff IAM Engineer(Architect) to be the design authority for identity across workforce, non-employee, customer, partner, non-human, and AI agent identities. You will write decisions, own Auth0 and Okta-related architectures, and drive consolidation of identities into a unified platform.

This hands-on role requires deep CIAM experience, architectural influence without direct authority, and the ability to communicate tradeoffs to staff engineers and CISOs alike.

Qualifications

• 8+ years in identity and access management, security engineering, or platform architecture.
• Hands-on CIAM platform experience, ideally on Auth0, including tenant and organization modelling.
• Strong command of federation and authentication protocols: SAML, OIDC, OAuth 2.0, SCIM, WebAuthn, FIDO2.
• Enterprise workforce IdP architecture experience, on Okta or equivalent.
• Demonstrated ability to set architectural direction and get engineering teams to adopt it without direct authority.
• Clear written communication, including architecture decision records and reference designs.

Responsibilities

• Own the target-state identity architecture across workforce, non-employee, external, non-human, and AI identity types, and set the standards and decision records.
• Own our Auth0 customer identity architecture end to end, including tenant and organization modelling, MFA, and m-to-m authentication.
• Keep the customer and patient identity plane separate from the workforce plane and define interfaces for external/partner identities.
• Own the architecture for consolidating remaining authentication paths onto a single workforce IdP.
• Design SSO, SCIM provisioning, and automated deprovisioning patterns with audit evidence.
• Define federation and directory architecture across Okta, Entra ID, AWS, and GCP.
• Build Identity Security Posture Management and extend the posture warehouse and remediation engine.
• Partner with Security Operations to design identity threat detection into SIEM.
• Design access controls that satisfy HIPAA, HITRUST, and SOC 2 requirements.
• Serve as the design authority between identity risk and remediation teams.

Skills

IAM architecture

Hands-on architect

Written communication

Tools

Auth0

Okta

SailPoint ISC

Britive

Terraform

Entra ID

Job description

OpenLoop Health is hiring a Sr. Staff IAM Engineer(Architect) to be the design authority for identity across workforce, non-employee, customer, partner, non-human, and AI agent identities. You will write decisions, own Auth0 and Okta-related architectures, and drive consolidation of identities into a unified platform.

This hands-on role requires deep CIAM experience, architectural influence without direct authority, and the ability to communicate tradeoffs to staff engineers and CISOs alike.