Senior Identity Architect - Zero-Trust & AI Security

Drake Software; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Taxwell is seeking a Senior Identity Engineer to design, implement, and operate IAM across cloud, SaaS, and AI environments. You will lead authentication, authorization, SSO, MFA, lifecycle management, and privileged access with a focus on Zero Trust.

You will collaborate with security and engineering teams to enforce identity controls, governance, and secure integrations while advancing IaC-driven automation.

Qualifications

• 7+ years designing and implementing enterprise IAM solutions.
• Hands-on with Entra ID, M365, Okta, AWS IAM, and Azure identity services.
• Experience with SAML, OAuth 2.0, OpenID Connect, SCIM; strong Zero Trust knowledge.
• Experience securing cloud/SaaS APIs, AI platform identities, and governance.

Responsibilities

• Design and maintain enterprise IAM across Microsoft 365, Entra ID, Okta, AWS, Azure and SaaS apps.
• Lead authentication, authorization, federation, SSO, MFA, lifecycle management, and privileged access.
• Develop identity standards, reference architectures, and best practices per Zero Trust.
• Implement secure identity integrations for cloud platforms, apps, APIs, and third‑party services.
• Design controls for AI platforms, workload identities, API security, and access governance.
• Collaborate with security/engineering to enforce identity controls for AI agents and service accounts.
• Govern Joiner‑Mover‑Leaver, access reviews, RBAC, and privileged identity management.
• Integrate identity into enterprise solutions and cloud architectures via IaC and automation.
• Support identity security initiatives, incident response, and ongoing improvements.
• Evaluate new IAM technologies and conduct proof-of-concept security benchmarking.

Skills

Microsoft Entra ID

Microsoft 365

Okta

AWS IAM

Azure Identity

OAuth 2.0

OpenID Connect

SCIM

Zero Trust

RBAC

IGA

Tools

PowerShell

Python

Job description

Taxwell is seeking a Senior Identity Engineer to design, implement, and operate IAM across cloud, SaaS, and AI environments. You will lead authentication, authorization, SSO, MFA, lifecycle management, and privileged access with a focus on Zero Trust.

You will collaborate with security and engineering teams to enforce identity controls, governance, and secure integrations while advancing IaC-driven automation.