Senior IAM Architect: Zero Trust & Cloud Identity

Acrisure; Grand Rapids (MI); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan

HSA/FSA

Job summary

Acrisure seeks a Senior Identity & Access Management Engineer to drive design, development, and scalability of enterprise IAM within a Zero Trust framework. You will guide IAM strategy, implement advanced identity solutions, and mentor engineers across a global environment.

The ideal candidate has deep IAM architecture expertise, strong scripting skills, and experience with cloud IAM services. This role requires on-site collaboration and cross-functional partnership across Security, Cloud, and

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 5 years of hands‑on experience in Identity and Access Management.
• Deep expertise in Zero Trust frameworks and modern IAM principles.
• Extensive experience with IAM technologies (IGA, PAM, SSO/MFA, federation, directory services).
• Strong proficiency in scripting languages such as PowerShell, Python, or Bash.
• Experience with regulatory and compliance standards (NYDFS, HIPAA, NIST, etc.).
• Strong understanding of cloud-native IAM services (AWS IAM, Azure AD/Entra ID, GCP IAM).

Responsibilities

• Lead the design, implementation, and optimization of enterprise IAM solutions with a strong emphasis on CIAM, PAM, and IGA.
• Architect scalable integrations across hybrid, multi-cloud, and SaaS environments.
• Serve as a SME for PAM platforms (e.g., Delinea, CyberArk, BeyondTrust), including design of vaulting, session monitoring, credential rotation, and least-privilege models.
• Lead complex integrations for IGA platforms (e.g., Veza, SailPoint, Saviynt) and establish enterprise lifecycle automation, role engineering, and access certification frameworks.
• Build advanced automation using PowerShell, Python, or Bash to improve provisioning, deprovisioning, access certification, and compliance activities.
• Partner with HR, Cybersecurity, Infrastructure, Cloud, and Application teams to ensure cohesive identity architecture.
• Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
• Establish standards and automation for securing service accounts, API keys, secrets management, and machine identities.
• Collaborate with Security Operations to mature ITDR capabilities and identity-risk monitoring, including behavioral analytics and anomalous access detection.
• Act as a technical lead and mentor for junior IAM engineers.

Skills

IAM

CIAM

PAM

IGA

PowerShell

Python

SAML

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Delinea PAM

CyberArk

BeyondTrust

Veza

SailPoint

Saviynt

Job description

Acrisure seeks a Senior Identity & Access Management Engineer to drive design, development, and scalability of enterprise IAM within a Zero Trust framework. You will guide IAM strategy, implement advanced identity solutions, and mentor engineers across a global environment.

The ideal candidate has deep IAM architecture expertise, strong scripting skills, and experience with cloud IAM services. This role requires on-site collaboration and cross-functional partnership across Security, Cloud, and