More jobs:
Sr. Enterprise Identity Architect
Job in
Milpitas, Santa Clara County, California, 95036, USA
Listed on 2026-10-26
Listing for:
KLA-Tencor
Full Time
position Listed on 2026-10-26
Job specializations:
-
IT/Tech
Cybersecurity, Systems Engineer, Cloud Computing: Infrastructure & Operations, Information Security & Data Protection
Job Description & How to Apply Below
Group/DivisionKLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.
What You'll DoIn this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise.
We are seeking a highly experienced Sr. Enterprise Identity Architect to lead the design and modernization of enterprise identity security across on‑prem and cloud environments. This role provides deep technical expertise and strategic direction across Identity & Access Management (IAM), Identity Governance & Administration (IGA), Privileged Identity Management (PIM), Single Sign-On (SSO), Cloud Identity, Active Directory, and Entra (Azure AD).As a senior architect, you will define enterprise identity architecture, drive Zero Trust initiatives, and collaborate with cross‑functional teams to implement scalable, secure, and compliant identity solutions.
Key Responsibilities Develop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.
Establish identity standards, patterns, and reference architectures for on-premises and cloud environments.
Define and drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation.
Assess identity risk posture and recommend controls aligned with business and compliance requirements.
Architect and implement identity lifecycle and governance solutions including role modeling, access certification, and automated provisioning/deprovisioning.
Integrate IGA platforms with HR systems, AD/Entra , cloud applications, and SaaS platforms.
Define RBAC/ABAC frameworks and enforce least privilege across the enterprise.
Design and oversee PIM and privileged access architectures including just‑in‑time access, privileged session management, and secure admin tiering.
Align privileged access models across AD, Entra , cloud workloads, servers, databases, and network systems.
Provide architectural oversight for privileged access tools and secure credential management.
Architect SSO integrations using SAML, OAuth, OIDC, WS‑Fed, and modern authentication protocols.
Define centralized authentication patterns for cloud and on‑prem applications.
Implement effective MFA, Conditional Access, and continuous authentication strategies.
Provide architecture direction for Active Directory tiers, domain services, Group Policy structure, and identity security hardening.
Lead hybrid identity design involving Entra , AAD Connect, federation, and modern authentication migration.
Optimize identity infrastructure for scalability, resilience, and security.
Architect cloud identity solutions across Azure, multicloud, and SaaS platforms.
Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity segmentation.
Integrate cloud identity controls into enterprise identity governance and access workflows.
Act as the senior subject matter expert (SME) for identity architecture across security, cloud, application, and infrastructure teams.
Lead…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×