IAM Security Architect in VA, Dallas, TN

We are seeking a highly experienced and visionary identity and access management professional to define and lead enterprise-wide IAM strategy, architecture, and governance across a complex, global organization. This role serves as a key architectural authority responsible for translating business, security, risk, and regulatory requirements into durable, scalable identity solutions that span cloud, on-premises, SaaS, application, and AI environments. The ideal candidate brings deep expertise across the full identity ecosystem, covering both human and non-human identities, and possesses the technical breadth, leadership presence, and communication skills necessary to influence stakeholders at all levels of the organization.

This is a high-impact opportunity to shape the future of identity security at enterprise scale, including the emerging frontier of agentic AI identity management.

• Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities
• Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem
• Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions
• Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services
• Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates
• Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance
• Establish documented standards and design patterns across the IAM technology stack
• Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance
• Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost
• Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments
• Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options
• Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability
• Develop solution recommendations that support enterprise governance and risk management strategy
• Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests

• Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions
• Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles
• Proven experience with SailPoint Identity IQ or Identity Security Cloud, Ping Federate, Ping Directory, Microsoft Entra, Active Directory, and Service Now
• Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations
• Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences
• Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems
• Hands-on experience with One Identity Safeguard, Hashi Corp Vault, RSA, or comparable PAM and MFA technologies (preferred)
• Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, Ping Authorize, or comparable agentic identity management platforms (preferred)
• Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models (preferred)

• 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments

• Relevant security, cloud, or architecture certifications are preferred