Identity and Access Management Architect

Identity and Access Management Architect page is loaded## Identity and Access Management Architect locations:
999 Peachtree Street Northeast, Suite 2750 - ATLANTA, GA:
AUSTIN, TX:
GRAND RAPIDS, MItime type:
Full time posted on:
Posted Todayjob requisition :
JR110437##
** About Acrisure
** A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and  the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries.

Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.
*
* Job Summary:

** We are seeking an experienced Identity and Access Management Architect to join our IAM initiatives within the Zero Trust Security framework. The ideal candidate will have a strong understanding of IAM principles, identity governance, automation, access controls and IAM tools. This role requires hands-on experience with Identity Governance and Administration (IGA) platforms, Privilege Access Management (PAM) solutions, Zero Trust Architecture, identity federation, RBAC, Just-In-Time Access, SOX compliance, and scripting/automation for process efficiency and security enhancements.
** Responsibilities:
*** Design, implement, and support IAM solutions with a focus on Identity Governance and Administration (IGA).
* Support PAM program to administer, control, and monitor privileged access.
* Ownership of defining and maintaining the enterprise-wide IAM architecture and roadmap, ensuring alignment with Zero Trust and broader security strategy.
* Responsibility for leading IAM governance and policy development, including access standards, SoD enforcement, and role design frameworks.
* Configure, implement, and support IGA platforms (e.g., Veza, SailPoint, Saviynt) for lifecycle management, access reviews, and role-based access controls.
* Develop/evaluate/optimize scripts (e.g., Power Shell, Python, Bash, Rest API, MS Graph, Docker CLI) to automate user provisioning, de-provisioning, job mover, reporting tasks, and other identity related activities.
* Experience designing advanced authentication and access models (passwordless, adaptive access, FIDO2/Web Authn).
* Mentor and guide IAM engineers and project teams, providing architectural oversight and technical leadership.
* Define IAM metrics, reporting, and KPIs to measure access risk, compliance, and operational performance.
* Integrate IAM systems with HR, ITSM, directory services (e.g., Active Directory, LDAP), and cloud platforms (e.g., AWS, Azure AD).
* Collaborate with security, compliance, and application teams to align IAM strategies with business needs.
* Maintain documentation, runbooks, and system diagrams for IAM processes and tools.
* Stay current with IAM trends, tools, and security threats.
** Requirements
* ** Strong knowledge of Zero Trust security principles and frameworks.
* Familiarity with IAM technologies (e.g., Identity Governance, Single Sign-On, Multi-Factor Authentication, PAM, etc.).
* In-depth knowledge of protocols like SAML, OAuth 2.0, OIDC, LDAP, and SCIM.
* Proficient in scripting languages such as Power Shell, Python, or Bash for automation tasks.
* Strong analytical skills for proactive problem solving with minimal oversight or direction.
* Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical stakeholders.
*
* Education and Experience:

*** 7+ years of hands-on experience in Identity and Access Management with 3+ years in a senior architecture role.
* Experience with compliance standards such as NYDFS, SOX, HIPAA, and NIST.
* Experience in designing and implementing cloud IAM services (e.g., AWS IAM, Azure AD).
* Relevant certifications such as CISSP, CISM, or vendor-specific IAM certs (e.g., SailPoint Certified…