Senior IAM Security Architect - Remote

PowerToFly

Illinois

On-site

USD 130,000 - 195,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health plans

Parental leave

Flexible work arrangements

Company breaks

Time off

Long-term incentives

Training program

Job summary

Relativity is seeking a Senior IAM Engineer to lead the enterprise identity program, spanning workforce, machine, and workload identities, and anchor identity as the defense-in-depth control plane. You will partner with cross-functional teams to elevate detection and response, and mentor engineers in identity strategy across SaaS and multi-cloud environments.

You will drive governance, PAM, and CI/CD security integrations, align with SOX/SOC 2/ISO 27001, and help implement automated controls and

Qualifications

Bachelor's degree in CS, information security, or equivalent experience.
8+ years in enterprise IAM or security engineering; 6+ years if Master's.
Expert in architecting identity platforms across IdP/SSO, IGA, and PAM with auth/federation knowledge.
Experience leading identity threat detection and access investigations.
Knowledge of MITRE, NIST 800-63, Zero Trust; translate into technical controls.
Proficient in Python, Bash, or PowerShell for containerized services and policy automation.
Ability to mentor engineers and communicate strategy to peers and leaders.

Responsibilities

Design identity architecture across workforce, machine, and workload identities.
Advance continuous adaptive trust and zero-trust maturity with CAE, MFA/FIDO2, and session revocation.
Engineer ZTNA, least-privilege segmentation, MFA/FIDO2, and JIT access.
Design and optimize SSO, federation, and authentication standards (SAML, OAuth, OIDC, SCIM, LDAP, Kerberos).
Define CIS Benchmarks/DISA STIGs with automated compliance validation.
Automate identity lifecycle and integrate HR systems and directories.
Lead PAM implementation including vaulting, JIT elevation, and monitoring.
Govern non-human identities with policy-as-code and drift detection.