Senior Identity & Access Architect- Remote within the US

OEConnection LLC; Northern (KY); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Remote-first role with stipend

Tuition assistance

Home office stipend

Employee discounts

Job summary

OEConnection LLC is seeking a Senior Identity & Access Architect to design and evolve identity platforms across on-prem, hybrid, and cloud environments. You will partner with security, infrastructure, cloud, HR, and compliance teams to deliver secure yet user-friendly access controls.

Ideal candidates bring 7+ years in security or identity architecture, with hands-on IAM experience in hybrid AD/Entra ID and Okta, plus expertise in MFA, RBAC/ABAC, and federated patterns.

Qualifications

• 7+ years in security or identity architecture
• Hands-on enterprise IAM experience
• Experience with hybrid AD/Entra ID architectures and directory synchronization
• Strong background in identity lifecycle automation and access governance
• Knowledge of IAM protocols (SAML, OAuth 2.0, OIDC) and Kerberos/LDAP

Responsibilities

• Design and support hybrid identity architectures using Active Directory, Microsoft Entra ID, and Okta
• Architect authentication, authorization, and federation patterns for workforce, partner, and service identities
• Apply least-privilege models (RBAC, ABAC) and role lifecycle management
• Design MFA, passwordless, conditional access, and adaptive authentication policies
• Automate joiner/mover/leaver (JML) workflows and identity lifecycle processes
• Integrate IAM platforms with HR systems, directories, and SaaS applications
• Support identity incident response—investigating access misuse, auth failures, and compromise
• Monitor identity signals and logs to strengthen detection capabilities
• Produce architecture diagrams, standards, runbooks, and documentation
• Provide design reviews and best-practice guidance to application and infrastructure teams

Skills

Active Directory

Microsoft Entra ID

Okta

Identity lifecycle automation

Zero Trust design

RBAC/ABAC

Kerberos

LDAP

SAML/OAuth/OpenID Connect

communication skills

Education

Bachelor's degree in Computer Science or related field

Job description

Senior Identity & Access Architect- Remote within the US

United States

Job Description

Posted Tuesday, September 1, 2026 at 4:00 AM

OEC provides software solutions to those who work in the automotive parts and repair industry. Our solutions make it easier for automotive industry professionals to buy and sell parts, conduct repair research & planning, optimize estimates, improve the parts supply chain, and more. OEC partners with many of the world’s largest manufacturers, dealers and suppliers, shops and repairers, and service providers, giving our customers access to a comprehensive network and a streamlined workflow.

Interview integrity requirement

*Candidates must personally complete all interviews and technical assessments. The use of proxies or third-party representatives during any stage of the hiring process is prohibited and will result in disqualification. Final candidates will be required to participate in at least one in-person interview. Some travel for this role is expected. Reasonable accommodations will be provided in accordance with applicable laws.*

Help us build secure, seamless access across a modern enterprise. As our Senior IAM Architect, you'll design and evolve identity platforms that keep the right people connected to the right resources—securely, reliably, and without friction—across on-prem, hybrid, and cloud environments. You'll partner closely with security, infrastructure, cloud, application, HR, and compliance teams to deliver solutions that balance strong controls with great user experience.

What You'll Do

• Design and support hybrid identity architectures using Active Directory, Microsoft Entra ID, and Okta
• Architect authentication, authorization, and federation patterns for workforce, partner, and service identities
• Apply least-privilege models (RBAC, ABAC) and role lifecycle management
• Design MFA, passwordless, conditional access, and adaptive authentication policies
• Automate joiner/mover/leaver (JML) workflows and identity lifecycle processes
• Integrate IAM platforms with HR systems, directories, and SaaS applications
• Support identity incident response—investigating access misuse, auth failures, and compromise
• Monitor identity signals and logs to strengthen detection capabilities

Produce architecture diagrams, standards, runbooks, and documentation

Provide design reviews and best-practice guidance to application and infrastructure teams

What You Bring

• 7+ years in security or identity architecture with hands-on enterprise IAM expertise
• Advanced skills in Active Directory (domains, forests, trusts, GPOs), Microsoft Entra ID (Conditional Access, MFA, Identity Protection, PIM), and Okta (Workforce Identity, SSO, Lifecycle Management, Workflows)
• Proven experience with hybrid AD/Entra ID architectures and directory synchronization
• Strong background in identity lifecycle automation, role modeling, federation, Zero Trust design, PIM/PAM, access governance/certification, and large-scale directory transformations
• Knowledge of Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect
• Excellent communication skills across technical and non-technical audiences
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience)

Work Style: Remote/hybrid with occasional in-person collaboration; camera-on virtual meetings.

What We Offer:

• Full benefits starting Day 1 : Medical, Dental, and Vision
• 401(k) with company match
• Remote-first role with monthly communication stipend
• Professional development programs and tuition assistance
• Home office equipment stipend
• Employee resource groups and exclusive employee discounts

What makes working at OEC awesome? It varies from employee to employee. For some, it's the flexibility - whether it's remote work or a hybrid or in-person role, OEC takes our teams across multiple time zones and international communities. For others, it's the strong sense of camaraderie and community that celebrates both individuals and team-driven contributions. Or it could be the empowerment and how the team is encouraged to take risks, learn, and grow within a dynamic and supportive environment. But no matter what gets us out of bed in the morning, our whole global community is inspired to be forward thinking and drive innovative solutions for the automotive parts and repair industry.

OEConnection is subject to certain governmental recordkeeping and reporting requirements for the administration of civil rights laws and regulations. In order to comply with these laws, we invite applicants and employees to voluntarily self-identify their gender, race and ethnicity. Submission of this information is strictly voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provision of applicable laws, executive orders, and regulations, including those that require the information to be summarized and reported to the federal government for civil rights enforcement. When reported, data will not identify any specific individual. This information will be maintained separately from your application for employment. If you do not wish to self-identify at this time, you may do so in the future by submitting this form. Failure to provide the following information will not subject you to any adverse action or treatment. OEConnection is an Equal Opportunity/ Affiant Action employer. We provide equal employment opportunities to all qualified employees and applicants for employment without regard to race, religion, sex, age, marital status, national origin, sexual orientation, citizenship status, veteran status, disability or any other legally protected status. We prohibit discrimination in decisions concerning recruitment, hiring, compensation, benefits, training, termination, promotions, or any other condition of employment or career development.