Senior IAM Architect: Zero Trust & PAM for AI

Decisive Point; Sunnyvale (CA); On-site; USD 210,000 - 270,000; Full time

Job summary

Applied Intuition is seeking a senior identity leader to own end‑to‑end IAM, from foundational architecture to privileged access, and secrets management for AI agents. You will set direction, drive implementation, and act as the primary identity expert across the organization.

You will lead cross‑functional teams to mature IDP architecture, enforce least privilege, and advance Zero Trust across cloud and on‑prem environments. Exceptional communication and influence are essential.

Qualifications

• 8 - 12+ years in identity engineering, security engineering, or a closely related discipline.
• Hands‑on architecture or engineering in cloud environments (AWS, GCP, or Azure).
• Demonstrated track record of leading complex IAM programs from design through production.
• Deep expertise in modern IAM technologies: directories (LDAP/AD), IDPs, federation, and authentication protocols (SAML, OIDC, OAuth 2.0).
• Practical experience implementing Zero Trust identity models and PAM frameworks.
• Strong understanding of identity governance, IGA tooling, and role lifecycle management.
• Hands‑on experience with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager).
• Experience with non‑human identity and machine identity management at scale.
• Experience building access controls for AI workloads, agents, or service accounts at scale.
• Familiarity with SCIM provisioning and automated IGA workflows.
• Excellent communication and influencing skills - you can make identity concepts accessible to non‑technical audiences and drive alignment without authority.

Responsibilities

• Define the long‑term IAM strategy, roadmap, and operating model across the enterprise and product ecosystem.
• Assess and mature the current‑state IDP architecture, identifying gaps and driving a resilient, scalable design.
• Drive all identity systems toward Zero Trust principles - secure, scalable, and frictionless by default.
• Automate the full identity lifecycle beyond traditional IGA joiner‑mover‑leaver (JML) processes.
• Implement and enforce RBAC for human and non‑human identities at scale.
• Define and operationalize least‑privilege policies across all systems and environments.
• Centralize secrets management - keys, tokens, certificates - across cloud and enterprise environments.
• Design and deliver Privileged Access Management (PAM) for admin accounts spanning enterprise IT and cloud engineering.
• Implement a scalable access management model for AI agents and bots.
• Collaborate with IT Apps and infrastructure teams to enforce and enable SSO across the enterprise.
• Own the implementation and governance of authentication protocols (SAML, OIDC, OAuth 2.0) and modern identity standards.
• Partner with engineering, security, IT, compliance, and product teams to deliver access management capabilities that enable the business and satisfy audit requirements.
• Translate complex identity requirements into clear, executable technical plans and communicate tradeoffs to senior stakeholders.

Skills

Identity engineering

Cloud architectures

IAM program leadership

Zero Trust

Secrets management

RBAC & least-privilege

Non-human identity

SCIM provisioning

Communication / influencing

Tools

LDAP/AD

IDP platforms

SAML

OIDC

OAuth 2.0

HashiCorp Vault

AWS Secrets Manager

GCP Secret Manager

SCIM

Job description

Applied Intuition is seeking a senior identity leader to own end‑to‑end IAM, from foundational architecture to privileged access, and secrets management for AI agents. You will set direction, drive implementation, and act as the primary identity expert across the organization.

You will lead cross‑functional teams to mature IDP architecture, enforce least privilege, and advance Zero Trust across cloud and on‑prem environments. Exceptional communication and influence are essential.