IAM Security Architect role in VA, Dallas, TN

We are seeking a highly experienced and visionary identity and access management professional to define and lead enterprise-wide IAM strategy, architecture, and governance across a complex, global organization. This role serves as a key architectural authority responsible for translating business, security, risk, and regulatory requirements into durable, scalable identity solutions that span cloud, on-premises, SaaS, application, and AI environments. The ideal candidate brings deep expertise across the full identity ecosystem, covering both human and non-human identities, and possesses the technical breadth, leadership presence, and communication skills necessary to influence stakeholders at all levels of the organization. This is a high-impact opportunity to shape the future of identity security at enterprise scale, including the emerging frontier of agentic AI identity management.

Responsibilities:

- Define enterprise IAM strategy, target-state architectures, and multiyear roadmaps for human, non-human, and agent identities

- Create architecture diagrams, architectural principles, decision records, capability models, and transition plans across the identity ecosystem

- Assess business requirements, technology constraints, cyber risks, and regulatory obligations to recommend practical and supportable solutions

- Identify architectural gaps, technical debt, dependencies, and investment priorities across identity platforms and services

- Design enterprise identity solutions spanning identity governance and administration, authentication, access requests, access provisioning, directory services, privileged access, secrets, and certificates

- Automate, orchestrate, and streamline manual business processes while improving end user experience and strengthening governance

- Establish documented standards and design patterns across the IAM technology stack

- Lead complex architecture and design reviews and produce clear diagrams, process flows, integration specifications, and implementation guidance

- Resolve cross-platform architectural issues and make decisions that balance security, resiliency, scalability, operability, user experience, and cost

- Evaluate IAM products and platform capabilities through market analysis, proofs of concept, and technical assessments

- Advise security, infrastructure, application, AI, and business teams on identity requirements and solution options

- Guide the implementation of agentic AI identity capabilities, including discovery, ownership, authentication, authorization, governance, lifecycle controls, and auditability

- Develop solution recommendations that support enterprise governance and risk management strategy

- Drive adoption of standard IAM solutions across hundreds of business applications, including SAML/OAuth SSO, SCIM or Just-in-Time provisioning, role-based access control, and centralized access requests

Skills:

- Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions

- Deep knowledge of IAM principles including identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles

- Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow

- Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations

- Strong communication and influence skills with the ability to translate between technical, security, risk, and business audiences

- Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems

- Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies (preferred)

- Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on SailPoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms (preferred)

- Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models (preferred)

Experience:

- 10 + years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments

Qualifications:

- Relevant security, cloud, or architecture certifications are preferred