Senior Identity Architect: Zero-Trust & PAM Lead

InvestedintheMission; Sunnyvale (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

Applied Intuition in Sunnyvale seeks a senior identity engineer to own end‑to‑end identity architecture, from IDP design to PAM and AI agent access controls. You will shape Zero Trust, RBAC, and secrets management across cloud and on‑prem environments.

You’ll partner with security, IT, compliance, and engineering to implement scalable authentication protocols (SAML, OIDC, OAuth 2.0) and ensure audit readiness while enabling secure product and enterprise operations.

Qualifications

• 8–12+ years in identity engineering or security engineering.
• Hands‑on cloud architecture in AWS, GCP, or Azure.
• Proven track record leading complex IAM programs.
• Deep expertise in IAM tech: LDAP/AD, IDPs, federation, protocols.
• Practical Zero Trust and PAM experience.
• Strong governance, IGA tooling, and role lifecycle knowledge.
• Experience with secrets management platforms.
• Non‑human identity and machine identity management experience.
• Access controls for AI workloads, agents, or service accounts.
• Familiarity with SCIM provisioning and automated IGA flows.
• Excellent communication and stakeholder alignment.

Responsibilities

• Define the long‑term IAM strategy, roadmap, and operating model.
• Assess and mature current IDP architecture for scalability.
• Drive Zero Trust across identity systems with minimal friction.
• Automate the full identity lifecycle beyond JML processes.
• Implement and enforce RBAC for human and non‑human ids.
• Define least‑privilege policies across systems and environments.
• Centralize secrets management across cloud and enterprise.
• Design and deliver PAM for admin accounts across IT and cloud.
• Scalable access management for AI agents and bots.
• Collaborate to enable SSO enterprise‑wide.
• Own authentication protocols (SAML, OIDC, OAuth 2.0) and standards.
• Partner with teams to deliver authorization capabilities for business needs.
• Translate complex identity requirements into clear technical plans.

Skills

Identity engineering

Zero Trust

RBAC

SAML/OIDC/OAuth

IDP architecture

Secrets management

PAM

Non-human identities

AI workload access

SCIM provisioning

IGA tooling

Tools

HashiCorp Vault

AWS Secrets Manager

GCP Secret Manager

LDAP/AD

Job description

Applied Intuition in Sunnyvale seeks a senior identity engineer to own end‑to‑end identity architecture, from IDP design to PAM and AI agent access controls. You will shape Zero Trust, RBAC, and secrets management across cloud and on‑prem environments.

You’ll partner with security, IT, compliance, and engineering to implement scalable authentication protocols (SAML, OIDC, OAuth 2.0) and ensure audit readiness while enabling secure product and enterprise operations.