IAM Architect

Note:

This is a 6 months contract-to-hire role.

Minimum Qualifications
· 10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments.
· Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions.
· Proven experience with SailPoint Identity IQ or Identity Security Cloud, Ping Federate, Ping Directory, Microsoft Entra, Active Directory, and Service Now.
· Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles.
· Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations.
· Strong communication and influence skills, with the ability to translate between technical, security, risk, and business audiences.
· Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems.

Preferred Qualifications
· Hands-on experience with One Identity Safeguard, Hashi Corp Vault, RSA, or comparable PAM and MFA technologies.
· Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on Sailpoint Agentic Fabric/Entro, Ping Agent IAM Core, Ping Authorize, or comparable agentic identity management platforms.
· Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models.
· Relevant security, cloud, or architecture certifications.