IAM Architect

Job Description

Job Description

IAM Architect

Company Overview

A global consumer products organization is seeking an IAM Architect to help advance enterprise identity security across a complex, rapidly evolving technology environment. Based in Los Angeles, California, the organization supports global operations spanning cloud platforms, enterprise applications, infrastructure, and digital customer experiences. This is an opportunity to provide technical leadership while remaining hands-on with the architecture and implementation of modern identity solutions.

Role Summary

The IAM Architect will own and shape identity architecture across workforce IAM, customer identity, privileged access, identity governance, non-human identities, and third-party access. This role translates business, security, and operational requirements into scalable identity solutions while remaining directly involved in design, integration, testing, implementation, and complex troubleshooting. The ideal candidate combines deep IAM expertise with strong technical leadership and a vendor-agnostic approach to solving identity challenges.

Key Responsibilities

• Own end-to-end architecture for workforce IAM, customer identity, privileged access, identity governance, and non-human identities.
• Lead technical design reviews and provide architecture guidance to application, infrastructure, cloud, security, and engineering teams.
• Design, integrate, test, and troubleshoot enterprise IAM solutions from proof of concept through production implementation.
• Architect identity lifecycle and access controls for employees, contractors, third parties, applications, workloads, and service accounts.
• Advance access governance through role and entitlement design, certifications, approvals, segregation of duties, and policy enforcement.
• Design modern authentication and authorization solutions using Zero Trust, least privilege, adaptive access, and phishing-resistant authentication principles.
• Identify and reduce identity-related risks involving credentials, tokens, sessions, federation, privileged access, and machine identities.
• Develop vendor-neutral integration patterns across identity providers, cloud IAM, privileged access, governance, security, and service management platforms.
• Partner with security operations teams to improve identity telemetry, detection capabilities, investigation workflows, and incident response.
• Automate IAM processes using APIs, scripting, workflow automation, and modern software engineering practices.

Additional Details

• Work model: Hybrid three onsite days
• Hands-on architecture role with significant technical ownership and enterprise-wide influence
• Opportunity to shape modern identity security capabilities across human, privileged, customer, workload, and machine identities
• High-visibility position partnering across cybersecurity, infrastructure, cloud, application, and business teams

Required Qualifications

• Extensive experience designing, implementing, integrating, and securing enterprise Identity and Access Management solutions.
• Proven experience as a hands-on IAM Architect, Lead IAM Engineer, Solution Architect, or equivalent technical leader.
• Deep expertise across identity lifecycle management, authentication, authorization, federation, privileged access, identity governance, and non-human identities.
• Strong experience with enterprise identity platforms such as Okta, Ping Identity, Entra ID, or comparable technologies.
• Advanced knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, APIs, federation, tokens, and sessions.
• Strong understanding of Zero Trust, least privilege, adaptive access, identity threat mitigation, and modern authentication controls.
• Experience designing security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials.
• Strong technical leadership and communication skills with the ability to influence architecture and security decisions across teams.

Preferred Qualifications (Nice-to-Haves)

• Experience supporting global, hybrid, and multi-cloud IAM environments.
• Experience with identity threat detection and response, attack-path analysis, or identity exposure management.
• Hands-on experience automating IAM capabilities using scripting, APIs, Infrastructure as Code, and workflow automation.
• Experience designing customer identity and access management solutions.
• Experience implementing just-in-time privileged access and phishing-resistant authentication.
• Experience integrating identity platforms with security operations and monitoring capabilities.
• Relevant identity, cybersecurity, cloud, or architecture certifications.
• Experience leading complex IAM implementations while mentoring engineers and establishing technical standards.

Compensation & Benefits

• $180,000 - $220,000 annually
• 10% discretionary annual bonus opportunity
• Comprehensive medical, dental, and vision coverage
• Retirement savings benefits
• Paid time off and company holidays
• Employee discounts and wellness programs
• Professional development and certification opportunities