IAM Architect

Overview Voleon is a technology company that applies state-of-the-art machine learning techniques to real-world problems in finance. For more than a decade, we have led our industry and worked at the frontier of applying machine learning to investment management. We have become a multibillion-dollar asset manager, and we have ambitious goals for the future. In addition to our enriching and collegial working environment, we offer highly competitive compensation and benefits packages, technology talks by our experts, a beautiful modern office, catered lunches, and more. Responsibilities Define and execute our identity and access management strategy across our hybrid infrastructure. Reporting directly to the CISO, you will be responsible for designing and implementing modern identity solutions that protect our critical intellectual property while enabling our research, engineering, and operations teams to move quickly. Initially work as a senior individual contributor, architect solutions across on-premise Linux environments, Kubernetes clusters, Windows systems, cloud identity providers, and public cloud platforms. As our IAM program matures, build and lead a team to scale our identity management capabilities. Establish credibility with senior technical leaders and transform identity management by focusing on high-risk areas while being mindful of production requirements. Requirements 8+ years of experience in identity and access management, security engineering, or infrastructure engineering with focus on authentication/authorization. Deep expertise in hybrid identity architectures bridging on-premise (LDAP, FreeIPA, Active Directory) and cloud identity platforms (AWS IAM, Azure AD/Entra, Google Workspace). Strong understanding of modern authentication protocols: OIDC, SAML, OAuth2, LDAP, Kerberos. Hands-on experience implementing identity solutions in Linux-heavy environments with POSIX requirements. Experience with cloud IAM platforms (AWS IAM / Identity Center, Azure AD, GCP IAM) including roles, policies, federation, and service accounts. Knowledge of privileged access management (PAM) tools and patterns (CyberArk, HashiCorp Vault, AWS Secrets Manager, or similar). Understanding of zero-trust architecture principles and implementation patterns. Demonstrated ability to balance security requirements with operational workflows and production stability. Proven track record working with senior technical leaders and building organizational trust. Strong communication skills to explain complex identity concepts to both technical and non-technical stakeholders. Experience or strong interest in building and leading technical teams. Preferred Qualifications Experience with Kubernetes service account management and pod identity patterns. Familiarity with infrastructure-as-code (Terraform, Ansible) for identity provisioning. Experience implementing SCIM for automated user lifecycle management. Background in financial services, hedge funds, or high-security research environments. Experience with compliance frameworks (SOC 2, ISO 27001) as they relate to identity. Certifications such as CISSP, CCSP, or vendor-specific identity certifications. Bachelor's or Master's degree in Computer Science, Information Security, or related field. Friends of Voleon Candidate Referral Program If you have a great candidate in mind for this role and would like to have the potential to earn $15,000 if your referred candidate is successfully hired and employed by The Voleon Group, please use this form to submit your referral. For more details regarding eligibility, terms and conditions please review the Voleon Referral Bonus Program. Equal Opportunity Employer The Voleon Group is an Equal Opportunity employer. Applicants are considered without regard to race, color, religion, creed, national origin, age, sex, gender, marital status, sexual orientation and identity, genetic information, veteran status, citizenship, or any other factors prohibited by local, state, or federal law. Compensation Range: $280K - $310K #J-18808-Ljbffr