Senior Identity & Access Architect- Remote within the US

Francisco Partners; United States; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) match

Flexible PTO

Holidays

Remote stipend

Tuition assistance

Home office stipend

Employee discounts

Job summary

Francisco Partners is seeking a Senior IAM Architect to design and evolve identity platforms across on‑prem, hybrid, and cloud environments. You will partner with security, HR, and compliance to balance strong controls with a great user experience.

You will lead MFA, identity lifecycle automation, and federation strategies, while producing runbooks and architecture diagrams for large‑scale deployments. Remote/hybrid work is supported with some travel.

Qualifications

• 7+ years in security or identity architecture with hands‑on enterprise IAM expertise.
• Advanced skills in AD/Entra ID and Okta for hybrid environments.
• Experience with directory synchronization and large‑scale IAM deployments.
• Excellent communication across technical and non‑technical audiences.
• Bachelor's degree in CS/IS/Cybersecurity or equivalent experience.

Responsibilities

• Design and support hybrid identity architectures using AD, Entra ID, and Okta.
• Apply least-privilege models (RBAC, ABAC) and role lifecycle management.
• Design MFA, passwordless, conditional access, and adaptive authentication policies.
• Automate joiner/mover/leaver (JML) workflows and identity lifecycle processes.
• Integrate IAM platforms with HR systems, directories, and SaaS applications.
• Support identity incident response—investigating access misuse and auth failures.
• Produce architecture diagrams, standards, runbooks, and documentation.
• Provide design reviews and best‑practice guidance to teams.

Skills

IAM architecture

Active Directory

Microsoft Entra ID

Okta

Hybrid AD/Entra

RBAC/ABAC

PIM/PAM

Federation/SSO

Automation workflows

Communication skills

Education

Bachelor's degree in CS/Info Systems/Cybersecurity

Tools

SAML

OAuth 2.0

OpenID Connect

Job description

Interview integrity requirementCandidates must personally complete all interviews and technical assessments. The use of proxies or third-party representatives during any stage of the hiring process is prohibited and will result in disqualification. Final candidates will be required to participate in at least one in-person interview. Some travel for this role is expected. Reasonable accommodations will be provided in accordance with applicable laws.

Help us build secure, seamless access across a modern enterprise. As our Senior IAM Architect, you'll design and evolve identity platforms that keep the right people connected to the right resources—securely, reliably, and without friction—across on-prem, hybrid, and cloud environments. You'll partner closely with security, infrastructure, cloud, application, HR, and compliance teams to deliver solutions that balance strong controls with great user experience.

What You'll Do

Design and support hybrid identity architectures using Active Directory, Microsoft Entra ID, and OktaArchitect authentication, authorization, and federation patterns for workforce, partner, and service identitiesApply least-privilege models (RBAC, ABAC) and role lifecycle managementDesign MFA, passwordless, conditional access, and adaptive authentication policiesAutomate joiner/mover/leaver (JML) workflows and identity lifecycle processesIntegrate IAM platforms with HR systems, directories, and SaaS applicationsSupport identity incident response—investigating access misuse, auth failures, and compromiseMonitor identity signals and logs to strengthen detection capabilitiesProduce architecture diagrams, standards, runbooks, and documentationProvide design reviews and best-practice guidance to application and infrastructure teams

What You Bring

7+ years in security or identity architecture with hands‑on enterprise IAM expertiseAdvanced skills in Active Directory (domains, forests, trusts, GPOs), Microsoft Entra ID (Conditional Access, MFA, Identity Protection, PIM), and Okta (Workforce Identity, SSO, Lifecycle Management, Workflows)Proven experience with hybrid AD/Entra ID architectures and directory synchronizationStrong background in identity lifecycle automation, role modeling, federation, Zero Trust design, PIM/PAM, access governance/certification, and large-scale directory transformationsKnowledge of Kerberos, LDAP, SAML, OAuth 2.0, and OpenID ConnectExcellent communication skills across technical and non‑technical audiencesBachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience)

Work Style: Remote/hybrid with occasional in‑person collaboration; camera‑on virtual meetings.

What We Offer:

Full benefits starting Day 1: Medical, Dental, and Vision401(k) with company matchUnlimited Flex Time Off plus 10 company‑paid holidaysRemote‑first role with monthly communication stipendProfessional development programs and tuition assistanceHome office equipment stipendEmployee resource groups and exclusive employee discounts