Identity & Access Management (IAM) Architect

Identity & Access Management Architect

Memphis, TN

Pay Rate: $109,100 – 145,400

Multiple factors, including individual experience, skills and abilities will determine where an employee is placed in the pay range.

Category/Shift: Salaried Full-Time

Location: Memphis (Hybrid) or Remote (For remote positions, Global Cellulose Fibers will consider residents of the following states: Alabama, Arizona, Georgia, Florida, Massachusetts, Mississippi, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, Texas, Vermont, Virginia and Washington.)

About The Role:

Global Cellulose Fibers (GCF) is seeking an experienced Identity & Access Management (IAM) Architect to lead the strategy, design, implementation, and governance of enterprise identity services. This role is responsible for developing modern identity architectures that enable secure, compliant, and user-friendly access to company resources across cloud, on-premises, and third-party environments.

The IAM Architect will serve as the technical authority for identity governance, access management, privileged access management, authentication, authorization, and zero-trust identity initiatives. This position partners closely with Infrastructure, Cloud, Application Development, HR, Compliance, and business leaders to ensure identity services support organizational objectives while reducing cybersecurity risk.

Key Responsibilities:

IAM Strategy & Architecture

• Develop and maintain GCF's IAM strategy, roadmap, and reference architectures.
• Experience leading IAM transformation initiatives, including carve-outs, TSA exits, mergers, acquisitions, or large-scale identity modernization programs.
• Design secure identity solutions supporting cloud, hybrid, and on-premises environments.
• Drive implementation of Zero Trust principles through identity-centric security controls.
• Lead modernization initiatives including passwordless authentication and adaptive access.
• Establish IAM standards, patterns, and governance processes.

Identity Governance & Administration (IGA)

• Design and oversee joiner, mover, and leaver processes.
• Develop role-based and attribute-based access control models (RBAC/ABAC).
• Define and maintain identity lifecycle governance controls.
• Lead access certification and recertification programs.
• Collaborate with HR and business stakeholders to improve identity governance processes.

Access Management

• Architect federation, SSO, MFA, and adaptive access solutions.
• Design secure authentication and authorization models for workforce, contractor, vendor, and machine identities.
• Integrate enterprise applications with IAM platforms and identity providers.
• Develop policies for privileged and elevated access.

Privileged Access Management (PAM)

• Lead implementation and governance of PAM capabilities.
• Define privileged account management standards.
• Design governance and controls for administrative access, service accounts, machine identities, APIs, and workload identities
• Implement just-in-time and least-privilege access methodologies.

Security Architecture & Risk Management

• Perform IAM risk assessments and security reviews.
• Ensure identity solutions align with NIST, ISO 27001, CIS Controls, and Zero Trust frameworks.
• Support regulatory and audit requirements including SOX, PCI, GDPR, and other applicable standards.
• Evaluate new IAM technologies and recommend strategic investments.

Leadership & Collaboration

• Serve as the IAM subject matter expert across the organization.
• Provide architectural guidance to project teams and application owners.
• Mentor IAM engineers and security analysts.
• Collaborate with managed service providers and third-party vendors.
• Participate in security governance and architecture review boards.

About You: Knowledge, Skills, and Abilities

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field preferred.
• 10+ years of professional experience in cybersecurity, with at least 5 years as an IAM architect in a complex enterprise environment.
• Proven experience collaborating with third-party security vendors or MSPs
• Experience designing and implementing enterprise IAM solutions.
• Experience supporting cloud-first environments, particularly Microsoft Azure.
• Proven knowledge of security frameworks and standards such as NIST, ISO 27001, CIS, ISA 62443 and MITRE ATT&CK
• Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), ISA 62443, Health Insurance Portability and Accountability Act (HIPAA), and General Data Protection Regulation (GDPR).
• Certifications such as CISSP, CISA, CIAM, or CISM preferred.
• Strong analytical, relationship management, and communication skills (both written and verbal).
• Ability to collaborate across functions and influence stakeholders

Technical Expertise:

Strong knowledge of:

• Microsoft Entra ID (Azure AD)
• SailPoint, Saviynt, or comparable IGA platforms
• CyberArk, Delinea, BeyondTrust, or comparable PAM solutions
• Active Directory and Hybrid Identity
• SAML 2.0, OAuth 2.0, OIDC, SCIM, and LDAP
• MFA and Passwordless Authentication
• Identity Federation and SSO
• RBAC and ABAC models
• Zero Trust Architecture
• Privileged Access Governance
• Cloud Security Architecture

About Global Cellulose Fibers (GCF):

Our GCF business helps customers transform renewable cellulose fibers into essential everyday products. Our safe, high-quality pulp forms the basis for a wide range of applications like towel and tissue products, diapers, feminine care, incontinence and other personal care products that promote health and wellness. In addition, our specialty pulp serves as a sustainable raw material used in construction materials, paints, coatings and more. GCF generated $2.8B in revenue in 2024 and has 3,300 employees globally, with nine manufacturing facilities and eight regional offices. Additional information can be found by visiting globalcellulosefibers.com.

Why GCF:

Global Cellulose Fibers promotes employee well-being by providing safe, caring and inclusive workplaces. We have team members all around the world with diverse backgrounds, experiences, and perspectives. These are our strengths. We are committed to creating a culture where all individuals are respected, valued, engaged and have an opportunity to do their best work every day. We invite you to bring your uniqueness, creativity, talents, experiences, and safety mindset to be a part of our increasingly inclusive and diverse culture.

We've Got You Covered:

At Global Cellulose Fibers, our employees are our most important asset and that's reflected in our benefits package that includes health, welfare and retirement plans. We are proud to offer a variety of benefits to support our employees and their families, including:

• Medical, Dental, Life insurance
• Flexible Spending Accounts
• Short-term and Long-term Disability
• 401(k) and Company-funded retirement contributions
• Paid Time Off

Physical Location of Position:

Memphis Corporate Office

6400 Poplar Ave.

Memphis, TN 38197

Global Cellulose Fibers is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Global Cellulose Fibers complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact View email address on click.appcast.io or View phone number on click.appcast.io.