Senior IAM Architect — Zero Trust, PAM & SSO (Remote)

Relativity; Baltimore (MD); On-site; USD 130,000 - 195,000; Full time

Benefits offered by this job

Health & dental plans

Parental leave

Flexible work arrangements

Company breaks

Incentives & training

Job summary

Relativity is seeking a Senior IAM Engineer to lead the enterprise identity program, architecting identity as the control plane across workforce, machine, and workload identities. You will own the architecture, define CAE and Zero Trust maturity, implement MFA, SSO, PAM, and IGA, and mentor engineers while partnering with GRC to meet SOX, SOC 2, and ISO 27001 requirements.

This remote role offers exposure to multi‑cloud environments and a chance to advance AI‑enabled security in a

Qualifications

• Bachelor's degree in Computer Science, Information Security, or equivalent experience.
• 8+ years of hands‑on experience in enterprise IAM or security engineering, with deep specialization in identity, authentication, and access.
• Expert, hands‑on experience architecting and operating identity platforms (Okta, Entra ID/Azure AD, Ping) with advanced knowledge of SAML, OIDC, OAuth, SCIM, LDAP, and Kerberos.
• Demonstrated experience leading identity threat detection, complex access investigations, and automation for access enforcement and observability.
• Working knowledge of MITRE, NIST 800‑63, Zero Trust and translating them into technical controls.
• Proficiency in scripting/automation (Python, Bash, PowerShell) for containerized services and policy‑as‑code.
• Proven ability to mentor engineers and communicate technical strategy to engineering peers and leadership.

Responsibilities

• Design identity architecture spanning workforce, machine, and workload identity with layered controls.
• Advance continuous adaptive trust capabilities (CAE, risk-based and phishing‑resistant authentication) for Zero Trust maturity.
• Engineer and optimize MFA/FIDO2, SSO, federation across SaaS and multi‑cloud environments.
• Define and tune IAM governance (IGA) and PAM, including JIT elevation and session monitoring.
• Lead integration of identity telemetry into SIEM/SOAR for credential abuse and privilege escalation detection.
• Collaborate with GRC on identity controls aligned to SOX, SOC 2, ISO 27001, HIPAA, GDPR, and CCPA.

Skills

Identity architecture

ZTNA / Zero Trust

SAML / OIDC / OAuth

PAM / CyberArk / BeyondTrust

IGA / Access reviews

SIEM / SOAR integration

Policy-as-code / IAC

Scripting (Python / Bash / PowerShell)

Mentoring engineers

Compliance frameworks (NIST / MITRE /

Education

Bachelor's degree in Computer Science, Information Security, or equivalent

Master's degree in Cybersecurity or relevant field

Certifications such as CISSP, CISM, GCIH, GCFA, CCSP, AWS Security Specialty, SC‑300, or AZ‑500

Tools

Okta

Entra ID / Azure AD

Ping Identity

CI/CD security tooling

CIS Benchmarks / DISA STIGs tooling

Cloud platforms (AWS/Azure/GCP)

Job description

Relativity is seeking a Senior IAM Engineer to lead the enterprise identity program, architecting identity as the control plane across workforce, machine, and workload identities. You will own the architecture, define CAE and Zero Trust maturity, implement MFA, SSO, PAM, and IGA, and mentor engineers while partnering with GRC to meet SOX, SOC 2, and ISO 27001 requirements.

This remote role offers exposure to multi‑cloud environments and a chance to advance AI‑enabled security in a