Principal IAM Security Architect

Overview

Guardian Life is seeking a Principal IAM Security Architect to serve as a thought leader and subject-matter expert within the IAM domain. This role will involve defining enterprise-wide IAM strategies, guiding the organization's adoption of best practices across cloud and on-premises technologies, and driving innovation to support the business's strategic objectives.

• Lead the definition and execution of the organization’s IAM strategy, aligning with the overall enterprise security and technology roadmap.
• Serve as the top-tier authority on all IAM topics, with an emphasis on integrating cloud and on-premises enterprise architectures.
• Design scalable, reusable, and forward-thinking IAM solutions that meet current business needs while anticipating future requirements.
• Establish IAM architectural standards, patterns, and guidelines to ensure consistent implementation across the organization.
• Champion the adoption of cutting-edge cybersecurity controls across IAM, App Sec, and Dev Sec Ops  domains.
• Drive organization-wide API security implementations, promoting the use of modern open standards like OAuth, OIDC, and strong authentication protocols.
• Conduct in-depth evaluations of emerging IAM tools and technologies, shaping the organization's future investments.
• Act as a mentor and advisor to senior architects and engineers, providing technical guidance and fostering talent development.
• Collaborate closely with business leaders, solution architects, and engineering teams to ensure seamless integration of IAM capabilities into enterprise solutions.
• Represent the organization in industry forums and maintain awareness of evolving regulatory compliance standards related to data privacy and security.
• Advocate for the strategic importance of IAM to executive leadership, articulating risks and opportunities in business terms.
• Oversee technical delivery for critical IAM projects, ensuring adherence to timelines, quality benchmarks, and security policies.

• 15+ years of experience in cybersecurity with a strong focus on Identity and Access Management.
• 10+ years of expertise in security architecture, including enterprise-level IAM solution design and implementation.
• Proven experience leading IAM initiatives across Amazon Web Services (AWS), Microsoft Azure, and hybrid environments.
• Extensive knowledge of IAM technologies and protocols, including SSO, MFA, Federation, PAM, OIDC, OAuth, SAML, and SCIM.
• Deep familiarity with identity proofing, fraud prevention, and verification technologies.
• Hands-on experience with leading IAM platforms, such as Ping Identity, Okta, and Microsoft Entra
  
  ID, and Identity as a Service (IDaaS) solutions.
• Advanced understanding of regulatory compliance frameworks (e.g., NYDFS, CCPA, GDPR) and security standards (e.g., NIST, ISO 27001).
• Strong knowledge of API security, application security (OWASP Top 10), and encryption technologies.
• Demonstrated leadership in managing cross-functional teams, mentoring technical staff, and influencing organizational strategy.
• Relevant certifications (e.g., CISSP, CISM, CCSP) are strongly preferred.

• Strategic thinker with the ability to align IAM initiatives with business objectives.
• Exceptional communication and presentation skills, capable of influencing stakeholders at all levels.
• Collaborative leader with a passion for developing teams and fostering innovation.

• Three days a week at a Guardian office in Holmdel, NJ, or Bethlehem, PA.

Salary Range:

$ - $

At Guardian, you’ll have the support and flexibility to achieve your professional and personal goals. Through skill-building, leadership development and philanthropic opportunities, we provide opportunities to build communities and grow your career, surrounded by diverse colleagues with high ethical standards.

As part of Guardian’s Purpose – to inspire well-being – we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues. Explore our company benefits at  Benefits apply to full-time eligible employees. Interns are not eligible for most Company benefits.