Senior IAM Architect: Zero Trust & AI Identity

OneMain Financial; Baltimore (MD); On-site; USD 150,000 - 190,000; Full time

Job summary

OneMain Financial is seeking an IAM Architect to design enterprise-wide identity security architectures aligned to NIST, spanning cloud, on‑premises, SaaS, and hybrid environments.

You will translate business and regulatory requirements into secure IAM blueprints, lead architecture reviews, and mentor junior engineers. Strong collaboration with IT, risk, and product teams is essential.

Qualifications

• 7-10 years in cybersecurity with 3+ years in IAM architecture or related design role
• Deep working knowledge of NIST CSF, SP 800-53, SP 800-171, and SP 800-207 Zero Trust
• Experience designing IAM architectures for enterprise systems, cloud, SaaS, APIs, and hybrid environments
• Strong understanding of IAM domains: lifecycle management, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, access reviews
• Hands-on familiarity with Okta, Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos, and privileged access technologies
• Strong understanding of AI/GenAI security concepts: agent identities, delegated access, auditability of agent actions
• Experience in regulated environments and aligning identity controls to compliance frameworks
• Excellent communication, collaboration, documentation, and executive-facing presentation skills

Responsibilities

• Lead IAM architecture reviews for new technologies, applications, AI agents, and enterprise systems
• Identify identity-related gaps such as over-permissioned roles, shared credentials, weak delegation
• Advise on risk mitigation for authentication, authorization, privileged access, and secrets management
• Collaborate with engineering, cloud, infrastructure, and AI teams to ensure secure deployment
• Provide guidance to project and product teams throughout the SDLC with secure-by-design IAM controls
• Develop and maintain IAM standards and identity governance frameworks

Skills

IAM architecture

Security architecture

Cybersecurity

NIST frameworks

Tools

Okta

Microsoft Entra ID

SCIM

SAML

OAuth

OIDC

LDAP

Kerberos

Job description

OneMain Financial is seeking an IAM Architect to design enterprise-wide identity security architectures aligned to NIST, spanning cloud, on‑premises, SaaS, and hybrid environments.

You will translate business and regulatory requirements into secure IAM blueprints, lead architecture reviews, and mentor junior engineers. Strong collaboration with IT, risk, and product teams is essential.