Senior IAM Architect - Remote Identity Security Leader

Relativity; Seattle (WA); On-site; USD 130,000 - 195,000; Full time

Job summary

Relativity is seeking a Senior IAM Engineer to lead identity strategy and architecture across workforce, machine, and workload identities. You will anchor identity as the primary control plane in a defense‑in‑depth program, partnering with the Manager of Enterprise Security to reduce the organization’s identity attack surface and elevate detection and response to identity‑based threats.

This role requires extensive experience in IdP/SSO, IGA, and PAM, with strong skills in scripting and

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent.
• 8+ years hands-on experience in enterprise IAM or security engineering, with deep specialization in identity, authentication, and access domains, or a Master's degree with 6+ years.
• Expert hands-on experience architecting and operating identity platforms across IdP/SSO (Okta, Entra ID/Azure AD, Ping) with advanced knowledge of authentication and federation protocols (SAML, OIDC, OAuth 2.0, SCIM, LDAP, Kerberos).
• Demonstrated experience leading identity threat detection, complex access investigations, and detection-engineering efforts.
• Working knowledge of MITRE, NIST 800-63, Zero Trust and translating them into technical controls.
• Proficiency in at least one scripting language (Python, Bash, or PowerShell) applied to containerized services and identity use cases.
• Proven ability to mentor engineers and communicate technical strategy to technical and non-technical stakeholders.

Responsibilities

• Design identity architecture spanning workforce, machine, and workload identity.
• Advance continuous adaptive trust capabilities (CAE, risk-based authentication, phishing-resistant auth).
• Engineer and optimize ZTNA, least-privilege micro-segmentation, MFA/FIDO2, and JIT access.
• Design and optimize SSO, federation, and authentication standards across SaaS and multi-cloud.
• Define and tune CIS/DISA hardening standards with automated validation.
• Design identity lifecycle automation integrating HR systems and directories.
• Lead with IGA capabilities: access reviews, certification campaigns, and segregation-of-duties enforcement.
• Lead PAM implementation including credential vaulting, JIT elevation, and session monitoring.
• Design governance for non-human identities with drift detection and policy-as-code.

Skills

Identity architecture

Zero Trust

MFA/FIDO2

SAML/OIDC/OAuth

Scripting (Python/Bash)

Mentoring

Education

Bachelor's in Computer Science/Information Security

Master's in Cybersecurity or relevant field

Tools

Okta

Entra ID/Azure AD

Ping Identity

CyberArk

BeyondTrust

SailPoint

Saviynt

Job description

Relativity is seeking a Senior IAM Engineer to lead identity strategy and architecture across workforce, machine, and workload identities. You will anchor identity as the primary control plane in a defense‑in‑depth program, partnering with the Manager of Enterprise Security to reduce the organization’s identity attack surface and elevate detection and response to identity‑based threats.

This role requires extensive experience in IdP/SSO, IGA, and PAM, with strong skills in scripting and