IAM ARCHITECT

The IAM Platform Architect will define the strategy, architecture, standards, and governance model for identity and access management capabilities across Client. This role requires a holistic understanding of the identity ecosystem and the ability to translate business, security, risk, and regulatory requirements into durable enterprise designs. The architect will cover both human and non-human / agent identities and will become a key architectural authority across the IAM technology stack, including SailPoint Identity IQ, Sailpoint ISC, Ping Federate, Ping Authorize, Ping Agent IAM Core, Ping Directory, Microsoft Entra, Microsoft Active Directory, Service Now, One Identity Safeguard, Hashi Corp Vault, and RSA SecureID.

The successful candidate will establish an integrated roadmap and guide the implementation of secure, scalable identity services across cloud, on-premises, SaaS, application, and AI environments. HOW YOU WILL MAKE AN IMPACT IAM Strategy, Architecture, and Roadmaps
· Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities.
· Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem.
· Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions.
· Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services. Enterprise Solution Design and Governance
· Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates.
· Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance.
· Establish documented standards and design patterns across the IAM technology stack.
· Lead complex architecture and design reviews; produce clear diagrams, process flows, integration specifications, and implementation guidance.
· Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost. Technology Evaluation and Advisory
· Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments.
· Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options.
· Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability.
· Develop solution recommendations that support enterprise governance and risk management strategy.
· Drive adoption of standard IAM solutions across hundreds of business applications, such as SAML/OAuth SSO, SCIM or Just-in-Time (JIT) provisioning, role-based access control (RBAC), centralized access requests via Service Now, etc. WHY YOU'LL BE A GREAT FIT

Minimum Qualifications
· 10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments.
· Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions.
· Proven experience with SailPoint Identity IQ or Identity Security Cloud, Ping Federate, Ping Directory, Microsoft Entra, Active Directory, and Service Now.
· Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and…