Principal Architect, Security Architecture

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

The Principal IAM Architect serves as the senior technical authority for Identity and Access Management (IAM) architecture across the enterprise. This role is responsible for defining the strategic direction, architecture standards, and technology roadmap for identity services that protect critical business assets while enabling secure and efficient workforce, partner, and customer access. The Principal IAM Architect partners with cybersecurity, infrastructure, application development, cloud engineering, and business leaders to design scalable identity solutions that support business growth, regulatory compliance, and Zero Trust security objectives.

Operating with significant autonomy, this role drives enterprise-wide identity transformation initiatives, establishes architectural standards, and serves as the organization’s subject matter expert for modern identity technologies and access governance.

• Serves as the enterprise lead architect for Identity and Access Management (IAM), providing strategic and technical leadership for identity-related initiatives across the organization.
• Defines and maintains the enterprise IAM architecture roadmap, standards, reference designs, and implementation patterns supporting workforce, privileged, third-party, and customer identities.
• Designs scalable and secure identity solutions that align with business objectives, cybersecurity strategy, regulatory requirements, and operational needs.
• Leads architectural decisions related to Identity Governance and Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Passwordless Authentication, Identity Federation, and Access Governance.
• Establishes enterprise identity architecture standards supporting cloud, hybrid, and on-premises environments, including Microsoft Entra , Active Directory, SaaS platforms, and business-critical applications.
• Partners with application owners, infrastructure teams, cybersecurity leadership, and enterprise architects to integrate identity controls into technology initiatives and business processes.
• Evaluates and recommends IAM technologies, platforms, and vendors to improve security, operational efficiency, user experience, and scalability.
• Leads architecture reviews for major projects and strategic initiatives, ensuring solutions adhere to established identity standards and security requirements.
• Provides expert guidance on authentication protocols and standards, including OAuth 2.0, OpenID Connect (OIDC), SAML, SCIM, Kerberos, and modern federation technologies.
• Supports the organization’s Zero Trust strategy by designing identity-centric controls that enable secure access decisions based on risk, context, and continuous verification.
• Analyzes emerging cybersecurity threats, identity attack vectors, technology trends, and industry best practices to continuously improve the organization’s IAM capabilities.
• Partners with risk management, audit, compliance, and governance teams to ensure identity architectures support regulatory and internal control requirements.
• Leads architecture governance processes, technical reviews, and design boards to ensure consistency across IAM implementations.
• Mentors IAM engineers, architects, and technical leaders while promoting best practices, knowledge sharing, and architectural excellence…