IAM Architect
Openkyber
Professional Summary Seasoned Google Cloud Platform IAM Architect with 15+ years of experience in Identity & Access Management, Cloud Security, and Enterprise Architecture. Proven expertise in designing and implementing large-scale access governance solutions, persona-based access models, entitlement frameworks, and cloud security architectures within highly regulated environments. Strong experience in Google Cloud Platform (Google Cloud Platform), enterprise IAM ecosystems, Active Directory integration, access governance, audit compliance, and security architecture. Adept at driving strategic architecture initiatives, stakeholder engagement, governance forums, and enterprise cloud transformation programs. Aligned with Wells Fargo's Google Cloud Platform Entitlement & Access Control Design, Implementation & Enablement initiative Key Responsibilities:
- Own and drive the enterprise Google Cloud Platform IAM architecture strategy and roadmap.
- Design persona-based access models for both human and non-human identities across Sandbox, Non-Prod, and Production environments.
- Define role hierarchy, entitlement catalogs, access governance standards, naming conventions, and metadata frameworks.
- Establish least privilege and Segregation of Duties (SoD) controls across Google Cloud Platform environments.
- Design and oversee integration between Google Cloud Platform, Active Directory, ART, AIMS, ACT and enterprise IAM platforms.
- Define access request, approval, provisioning, certification, and lifecycle management processes.
- Architect audit logging, monitoring, compliance reporting, and continuous access governance solutions.
- Lead architecture workshops with Security, IAM, Cloud Engineering, Governance, and Application teams.
- Create architecture blueprints, implementation roadmaps, reference patterns, runbooks, and governance documentation.
- Provide technical leadership during implementation, testing, rollout, and knowledge transfer activities.
- Drive cloud security best practices and support regulatory and audit requirements.
- Mentor architects, engineers, and technical leads across the program.
- IAM & Security Architecture
- Enterprise Identity & Access Management
- Google Cloud Platform IAM
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
- Segregation of Duties (SoD)
- Privileged Access Governance
- Access Certification & Reviews
- Entitlement Management
- Cloud Security & Platform Engineering
- Google Cloud Platform (Google Cloud Platform)
- Cloud Identity
- Service Accounts & Workload Identities
- Cloud Audit Logs
- Security Command Center
- Organization Policies
- IAM Recommender
- Identity Integration
- Active Directory
- LDAP
- SAML / OAuth / OIDC
- Identity Federation
- Enterprise IAM Platforms
- Automation & Policy Management
- Terraform
- Infrastructure as Code (IaC)
- Policy-as-Code
- Open Policy Agent (OPA)
- CI/CD Integration
- Governance, Risk & Compliance
- Least Privilege Models
- Audit & Compliance Controls
- Risk Management
- Financial Services Security Standards
- Regulatory Compliance Frameworks
- Leadership & Stakeholder Management
- Enterprise Architecture Governance
- Executive Stakeholder Management
- Cloud Security Strategy
- Cross-Functional Team Leadership
- Architecture Review Boards
- Client Engagement & Consulting
- Google Professional Cloud Architect Certification
- Google Professional Cloud Security Engineer Certification
- Google Professional Cloud Architect Certification.
- Google Professional Cloud Security Engineer Certification.
- Experience implementing enterprise-scale IAM solutions on Google Cloud Platform.
- Experience in Banking, Financial Services, or other highly regulated industries.
- Strong understanding of access governance, compliance controls, auditability, and cloud security frameworks.
- Experience working with global onsite-offshore delivery teams.
For applications and inquiries, contact:View email address on us.fitly.work
- Establishes a scalable and secure enterprise-wide Google Cloud Platform IAM model.
- Improves security posture through least privilege and SoD enforcement.
- Enables audit readiness and regulatory compliance.
- Enhances operational efficiency through automated access governance.
- Accelerates cloud adoption while maintaining security and governance standards.
- Creates reusable IAM frameworks and onboarding assets for future platform expansion.
$65.28 per hour
...65.28 Security Clearance: Ability to obtain and maintain Public Trust (or higher if required) Overview This role is for a senior IAM professional who can lead enterprise identity security and governance across Microsoft Entra ID and Microsoft ICAM environments. The...SuggestedContract workRemote work- ...Technical Skills Strong expertise in: Identity & Access Management (IAM) Authentication & Authorization Identity Governance &... ...Conditional Access Passwordless Authentication Identity Federation Architect solutions for: Entra ID Azure AWS Microsoft 365 Okta PingFederate...Suggested
- ...Position Overview We are seeking an experienced Security Architect Agentic Identity & Access Management to design and govern the target-state... ...(MCP) integrations. Key Responsibilities : Agentic IAM Target-State Architecture: Define and lead the enterprise target...SuggestedWork experience placement
- ...IAM Consultant Location: Palo Alto, CA OR Irvine, CA (Hybrid - 3 days a week onsite) Duration: 6 months CTH Description: 7+ years... ...enterprise migration from Entra ID / Azure AD to Okta as architect or technical lead Deep expertise in SAML, OIDC, OAuth 2.0,...Suggested3 days per week
- ...Role: Senior Identity & Access Management (IAM) Engineer Location: Remote (onsite as needed) Experience: 10+ Years Client: OpenKyber Rate: $50/hr on C2C Must-Have Skills 5+ years of experience in IAM, Information Security, Directory Services, or related areas Strong...SuggestedRemote work
- ...Position : IAM Security Engineer Location : Onsite 4 days a week in Lutz FL Duration : 6-month contract to hire The goal is not to hire administrators or analysts performing day-to-day operational work. OpenKyber already provides Tier 1/Tier 2 support and routine administration...Contract work
- ...Job Title : IAM Architect Location : Alpharetta, GA - Need to work from office 3 Days a week and need to come office for Face2Face Round of Interview Contract Position JD: Role Name - IAM Architect ROLE_DESCRIPTION - Job Description - IAM Architect Role Overview...Contract workWork at office3 days per week
- ...Job Title: IAM Operations / IAM Automation Engineer Location: Remote US Develops and maintains automation scripts and workflows using PowerShell, Python, Tines, and AI-enabled coding tools to streamline IAM Governance processes and reduce manual workload. Leverages...Remote work
- ...Job Summary We are seeking an experienced IAM / OCI Identity Engineer to support an ongoing Oracle Fusion ERP implementation . The... ...Candidate The ideal candidate is an OCI IAM Engineer / Identity Architect with strong IDCS and Entra ID experience who understands how...Full timeRemote workMonday to Friday
- ...Title: IAM Analyst Location: Arlington, TX (Onsite) Contract Job Description: Design, build, and maintain Business Roles and access templates. Perform role mining, role analysis, and RBAC optimization activities. Partner with business leaders...Contract work
- ...Business Systems Analyst - Identity Access Management Location- Hybrid Chicago, IL downtown Duration- 4-6 Months Job Description: As a IAM business systems analyst you will work on the IAM delivery team on IAM projects. You will be responsible for analyzing business...
- ...Google Architect Remote Role summary This role architects and delivers secure, scalable Google Cloud Platform solutions for a global network... ..., including Compute Engine, GKE, Cloud Storage, VPC, and IAM configurations Implement Infrastructure as Code using Terraform...Remote work
- ...OpenKyber . I came across your profile and felt it could be a good match for a current opportunity we're working on. Google Cloud Platform IAM Engineer (Associate) | Google Cloud Platform IAM Lead / Manager (VP) Location: Plano, TX - Onsite Duration: 12 Months Important...Live inImmediate start
- ...Job Description: Security Architect Agentic Identity & Access Management Location-Remote Role Overview We are looking for a Security Architect... ...security architecture for Agentic Identity & Access Management (IAM) capabilities. The role will focus on securing AI agents,...Remote work
- ...OpenKyber is looking for IAM Governance & Access Review Analyst for one of its clients Remote Job Title: IAM Governance & Access Review Analyst Required Skills ~ Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related...Immediate startRemote work
- ...Migration Consultant) Work Location: Remote Contract Term: 7/31/2027 Minimum Mandatory Requirements ~5+ years of IAM implementation and migration experience ~ Hands-on expertise with PingOne Advanced Identity Cloud and Microsoft Entra ID ~ Experience...Contract workRemote work
- ...Identity Manager IBM ISIM ISAM Architecture & Operations Yes 30% IAM Design, SSO, MFA Yes 25% Provisioning, Workflows, Access... ...Yes 10% Section III Job Requirements Design and architect IAM solutions using IBM ISIM ISAM Implement provisioning, workflows...
- ...Job Title: Technical Architect Cybersecurity, IAM/PAM & Infrastructure Security Classification: Senior Enterprise Architect Positions: 1 Work Mode: Hybrid / Remote-eligible Location: Sacramento, CA, with remote work permitted subject to approval Contract: Approximately...Contract workFor contractorsRemote work
- ...IAM engineer/architect. Houston, Texas- HYBRID Identity as a Perimeter and Modernization Program Microsoft Entra ID, Windows Hello for Business, Passkeys, and Conditional Access 1. Project Overview CenterPoint Energy seeks to modernize enterprise identity security...Temporary workFor contractors
- ...Job Title: (IAM) Saviynt Administrator/Architect Location: Spring, TX 77389 - Hybrid (3-Days a week Onsite) Duration: 12+ Months Contract Job Description: Position Overview: The IAM Architect will serve as the technical and strategic leader for the organization...Contract work3 days per week
- ...knowledge transfer Provide post-migration support Required Technical Skills: PingOne, Microsoft Entra ID, ForgeRock OpenAM, IAM, SSO, OAuth 2.0, OIDC, SAML, authentication architecture, security best practices. Preferred Qualifications: Government...Remote work
- ...We are seeking an experienced Lead IAM Security Engineer with deep expertise in Saviynt Identity Governance & Administration (IGA) to help mature and modernize a large enterprise IAM program. This is an engineering-focused role designed for professionals who build, improve...
- ...OpenKyber is looking for IAM Audit & Compliance Analyst for one of its clients Remote Job Title: IAM Audit & Compliance Analyst Summary We are seeking an experienced IAM Audit & Compliance Analyst to support audit, compliance, risk, and governance activities within the...Immediate startRemote work
- ...RESPONSIBILITIES: OpenKyber's client in Tampa, FL is seeking 2 IAM Engineers to take ownership of Identity Governance and Administration... .... Duties: Serve as the IGA Solutions Lead and Architect, owning design, implementation, and ongoing administration...Hourly payContract work
- ...Practical knowledge of Google Cloud Platform projects, networking, IAM, compute, containers, data services, logging and monitoring.... ...decisions. ~ Associate Cloud Engineer or Professional Cloud Architect certification is preferred. Success Measures Case records...Work at office3 days per week
- ...Role: IAM Business Analyst, Process, Persona and Change Location: Onsite - Charlotte NC USA(Hybrid) Practice: Cloud Business Unit Role Purpose: Translate stakeholder needs and observed friction into measurable processes, persona requirements,...
- ...Looking for a senior Identity & Access Management (IAM) leader to head an enterprise authentication modernization initiative. In this role, you will lead the migration from legacy ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID . Position...Remote work
- ...Science, Information Systems, or related field 5+ years' experience in Identity and Access Management engineering Expertise with IAM platforms including cloud (Azure, AWS, Google Cloud Platform). In-depth knowledge of authentication, authorization, and...
- ...Seeking an IAM Operations Lead for onsite contract opportunity with my direct client in Chicago IL. If interested , share your word document resume, work authorization, expected hourly pay rate, Chicago (current) location address , availability for onsite interview and...Hourly payContract work
- ...The primary skills are Google Cloud Platform IAM, Terraform and Golang - Kubernetes - Golang --- Google Cloud Platform (Google Cloud Platform) expertise --- Python programming --- Terraform infrastructure-as-code --- Identity and Access Management (IAM) specific knowledge...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to IAM Architect. Be the first to apply!

