Senior Identity Architect - IAM & Cloud Security (Hybrid)

Hruckus; United States; Hybrid; USD 229,233,000 - 272,214,000; Full time

Job summary

HRUCKUS seeks an Identity Architect to lead the design and evolution of enterprise IAM and cloud security across hybrid infrastructure, cloud platforms, and identity governance. You will guide architecture for authentication, privileged access, and non-human identities, shaping target-state patterns and roadmaps.

The role emphasizes strong Microsoft identity expertise, IAM governance, and collaboration with security, compliance, and cloud teams, with onsite work in Dallas–Fort Worth 2–3 days

Qualifications

• 10+ years of progressive experience in identity, cybersecurity, infrastructure, or enterprise architecture.
• 7+ years of hands-on IAM architecture or senior engineering experience in a large enterprise.
• Experience designing enterprise-wide identity architectures, standards, roadmaps, and integration patterns.
• Strong hands-on experience with Active Directory and Microsoft Entra ID.
• Hybrid identity, directory synchronization, authentication, and authorization.
• Experience with SAML, OAuth 2.0, OpenID Connect, SCIM, APIs, and federation.
• Saviynt or SailPoint experience.
• CyberArk or comparable PAM platform experience.
• Ability to work onsite in Dallas-Fort Worth 2-3 days per week.

Responsibilities

• Own and maintain enterprise IAM target-state architecture, reference patterns, technical standards, and roadmaps.
• Evaluate current identity capabilities across Active Directory, Entra ID, cloud environments, identity governance, PAM, and security platforms.
• Design integration patterns connecting identity governance, authentication, MFA, privileged access, secrets management, directories, and applications.
• Establish architecture standards for human and non-human identities, including service accounts and workload identities.
• Define joiner mover leaver processes, access requests, certifications, role management, entitlements, and exception management.
• Guide SSO, MFA, Conditional Access, federation, adaptive access, and identity proofing architecture.
• Design application integrations using APIs, SCIM, SAML, OAuth 2.0, and OpenID Connect.
• Provide architecture guidance for identity and permissions across AWS and Azure.
• Translate security, business, compliance, and operational requirements into implementation plans and architecture decisions.
• Review proposed solutions for least privilege, resiliency, auditability, and alignment with enterprise standards.
• Partner with IAM leadership, engineers, cloud teams, application owners, security operations, and compliance teams.
• Support automation using PowerShell, Python, APIs, and other integration techniques.
• Maintain architecture diagrams, decision records, data flows, control mappings, and operational standards.
• Guide remediation of orphaned identities, stale access, excessive permissions, service-account ownership gaps, and privileged-access risks.
• Support identity monitoring, threat detection, and security operations integration.

Skills

Active Directory

Entra ID

MFA

SSO

Conditional Access

PAM

AWS identity

Azure identity

SCIM

SAML

OAuth 2.0

OpenID Connect

Identity governance

RBAC

Least privilege

Saviynt

SailPoint

CyberArk

PowerShell

Python

APIs

Tools

Saviynt

SailPoint

CyberArk

Job description

HRUCKUS seeks an Identity Architect to lead the design and evolution of enterprise IAM and cloud security across hybrid infrastructure, cloud platforms, and identity governance. You will guide architecture for authentication, privileged access, and non-human identities, shaping target-state patterns and roadmaps.

The role emphasizes strong Microsoft identity expertise, IAM governance, and collaboration with security, compliance, and cloud teams, with onsite work in Dallas–Fort Worth 2–3 days