Lead IAM Solution Architect; Privileged Access & Cloud Identity

Location:

Remote (Continental US – working Core EST hours)

Duration: 12-Month Contract (Potential for Extension)

The Identity and Access Management (IAM) team is seeking an experienced Lead IAM Solution Architect to drive the design, engineering strategy, and execution of enterprise identity solutions. In this role, you will serve as the architectural authority for secure, scalable, and modern identity services supporting our digital transformation. You will partner closely with cybersecurity leadership, cloud engineering teams, and business stakeholders to define robust IAM roadmaps, mature our Privileged Access Management (PAM) posture, and safeguard modern cloud environments.

• 5+ years Privileged Access Management experience
• 8 years Active directory experience
• 3 years ENTRA experience
• 4 years of understanding of identity and access management controls experience.

(Must show this experience and years of experience at the top of your resume)

• Architectural Leadership:
  Define and maintain enterprise IAM reference architectures, design patterns, and multi-year strategic roadmaps across authentication, authorization, privileged access, and identity lifecycle management.
• PAM & Cloud Identity Strategy:
  Drive advanced architectural solutions for Privileged Access Management (Cyber Ark, Beyond Trust, Hashi Corp, etc.) and identity federation across hybrid environments (Active Directory, Microsoft Entra ).
• Cross-Functional Integration:
  Partner with infrastructure, application, and cloud teams (AWS, Azure, GCP) to seamlessly integrate enterprise systems, APIs, and SaaS platforms using modern protocols.
• Technical Governance & Compliance:
  Ensure all identity solutions comply with regulatory standards and frameworks (SOX, PCI-DSS, GDPR, NIST, Zero Trust guidelines).
• Vendor & Tool Evaluation:
  Lead technical evaluations, proof-of-concepts (POCs), and procurement analyses for next-generation IAM products and tooling.
• Engineering Guidance:
  Provide technical mentorship to IT implementation teams, establishing best practices for secure integration, coding standards, and lifecycle management.

• Identity & Access Management: 4+ years dedicated to defining and implementing enterprise IAM governance and architectural controls.
• Privileged Access Management (PAM): 5+ years hands‑on/architectural experience designing and deploying enterprise PAM frameworks.
• Directory Services & Federation: 8+ years experience with Active Directory and 3+ years architecting Microsoft Entra  (formerly Azure AD) solutions.
• Standards & Protocols:
  Strong practical mastery of identity standards including SAML 2.0, OAuth 2.0, OIDC, SCIM, RBAC, and ABAC.

• Experience architecting identity solutions in multi-cloud environments (AWS, Azure, GCP).
• Familiarity with regulatory frameworks governing financial services (SOX, PCI-DSS).
• Industry certifications such as CISSP, CISM, Certified Identity and Access Manager (CIAM), or vendor-specific certifications (Microsoft, Cyber Ark).

This position is fully remote within the continental United States (requiring core working hours in Eastern Standard Time). While day-to-day operations are remote, occasional travel may be required to a regional Hub or local office for strategic team summits, interactive planning sessions, and culture events.