IAM Architect

Note: This is a 6 months contract-to-hire role. 

Minimum Qualifications
·    10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments.

·    Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions.

·    Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow.

·    Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles.

·    Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations.

·    Strong communication and influence skills, with the ability to translate between technical, security, risk, and business audiences.

·    Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems.

Preferred Qualifications
·    Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies.

·    Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on Sailpoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms.

·    Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models.

·    Relevant security, cloud, or architecture certifications.