Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

Identity & Access Management Architect

Bestman Solutions

We're partnering with a highly technical firm within the financial industry as they continue to invest in and develop their cybersecurity capability.

Identity is a key part of that investment, and they're looking for an experienced Identity & Access Management Architect or Engineer to help shape and strengthen how identity is managed across the organisation.

This is an opportunity to work in a complex, engineering-led environment where security needs to support innovation rather than slow it down.

The firm is looking for someone who can bring strong technical knowledge, challenge existing approaches and help develop practical identity solutions that work across different platforms, applications and infrastructure.

What's particularly interesting is the breadth of the opportunity. You'll be involved in architectural decisions and longer-term planning, but also remain close to the engineering teams responsible for bringing those solutions to life.

The opportunity

You'll play an important role in developing the firm's IAM capability, working closely with security, infrastructure and software engineering teams.

The role offers a combination of architecture, technical problem-solving and hands-on involvement, with the opportunity to influence how identity services evolve across the business.

Your responsibilities will include:

  • Designing, improving and implementing IAM solutions across a complex technology environment.
  • Developing approaches to authentication, authorisation, privileged access and secrets management.
  • Supporting identity solutions for users, applications, services and machine-to-machine communication.
  • Working with identity protocols and federation technologies, including OAuth 2.0, OpenID Connect and SAML.
  • Establishing IAM architecture standards, security controls and reusable engineering patterns.
  • Reviewing existing identity capabilities, identifying technical gaps and recommending improvements.
  • Working alongside developers and infrastructure engineers to integrate identity into applications, cloud platforms and services.
  • Contributing to the wider IAM roadmap, balancing security requirements with operational and engineering needs.

This isn't a position focused solely on governance or producing architecture documentation. You'll need to understand how identity technologies work in practice and be comfortable getting involved in technical discussions and implementation decisions.

Who we're looking for

We're interested in speaking with experienced IAM Architects, Identity Engineers and Security Engineers who have taken ownership of identity solutions and enjoy solving complex technical challenges.

You don't necessarily need to have held the title of Architect. What's more important is your technical understanding, the environments you've worked in and your ability to design and deliver effective IAM solutions.

Ideally, you'll bring:

  • Strong experience in Identity & Access Management engineering, solution design or architecture.
  • Good knowledge of authentication, authorisation, federation and privileged access management.
  • Experience with identity technologies such as Active Directory, Microsoft Entra ID, CyberArk, HashiCorp Vault or similar platforms.
  • Understanding of OAuth 2.0, OpenID Connect, SAML and modern identity security principles.
  • Exposure to cloud environments, ideally AWS, Azure or GCP.
  • Familiarity with Linux, networking, containers or Kubernetes environments.
  • Scripting or automation experience, particularly Python.
  • The ability to work directly with technical teams, understand their challenges and translate security requirements into workable solutions.

Experience with Terraform, Ansible, infrastructure-as-code or Zero Trust architectures would be beneficial.

We're particularly interested in people who have worked in complex, highly engineered environments where identity needs to operate reliably across multiple technologies and platforms.

Financial services experience would be useful, but we're equally open to individuals from technology companies and other technically demanding organisations.

Why consider this opportunity?

There's a genuine opportunity to influence how IAM develops within the organisation, rather than simply maintain an established platform or work within a narrowly defined technical remit.

You'll be joining a growing security function, working with experienced engineering teams and contributing to a wider programme of identity improvements.

Whether you're an established IAM Architect looking for broader ownership or a technically strong IAM Engineer ready to take on more architectural responsibility, this could be an interesting next step.

Interested in learning more?

Get in touch for a confidential conversation about the role, the technical environment and what the team is looking to achieve.

Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Identity & Access Management Architect in New York, NY vacancy
  • $147.2k - $269.8k

     ...Responsibilities About the Team The Identity and Access Management vertical within USDS Data Protection Team is responsible for designing,...  ...About the Role As an Identity and Access Management Architect, you will be responsible for supporting the team along with... 
    Suggested
    Temporary work
    Local area
    Immediate start
    Shift work

    TikTok USDS Joint Venture

    New York, NY
    5 days ago
  •  ...Danaher is seeking an Architect, Privileged Access Management to design enterprise PAM architecture across regions and translate it into reference designs for privileged identities. You will collaborate with IAM, infrastructure, cloud, and DevOps teams to govern privileged... 
    Suggested
    Remote work

    Danaher Corporation

    New York, NY
    4 days ago
  • At Danaher, the Architect, Privileged Access Management designs the enterprise PAM architecture across all regions. Global PAM strategy and direction...  ...reference designs for privileged human and non-human identities. Thearchitect works independently and integrates with... 
    Suggested

    Danaher Corporation

    New York, NY
    4 days ago
  •  ...Point72’s Technology team is seeking a senior security professional to lead and mature our privileged access management program in New York. You will partner with infrastructure, security, cloud, and engineering teams to implement least-privilege controls, run certification... 
    Suggested

    Point72 Asset Management, L.P

    New York, NY
    2 days ago
  • Point72 is seeking a senior IAM/Privileged Access Manager to lead and mature our privileged access program across enterprise systems. You will collaborate with infrastructure, security, cloud, and engineering teams to implement least privilege, lifecycle management, and... 
    Suggested

    Point72

    New York, NY
    3 days ago
  • $136.5k - $250k

     ...seeking a hands-on Platform Architect with strong domain expertise...  ...across Custody, Wealth, and Asset Management to define, shape, and deliver...  ...automation, security/identity integration; proven ability to...  ...performance philosophy. We provide access to flexible global resources... 
    Temporary work
    Worldwide
    Flexible hours

    The Bank of New York Mellon

    New York, NY
    5 days ago
  •  ...Technology Enabled Services.Job DescriptionOpening for a Senior Identity and Access Management Professional preferably in the NY/NJ/SFO area. The...  ...during the lifecycle of solutions delivery, service owners, architects, project managers, global infrastructure teams, regional... 
    Permanent employment
    Full time
    H1b

    Sonsoft

    New York, NY
    3 days ago
  •  ...AvePoint, Inc. in New York, NY, is seeking a Principal Security Architect for Identity Resilience to own threat modeling, secure identity recovery,...  ...architecture experience with hybrid identity, privileged access, and incident response. You will partner with Product,... 

    AvePoint

    New York, NY
    2 days ago
  • $150k - $170k

     ...challenge Looking for AI Architect who will help establish and operate...  ..., planning, financial management, delivery coordination, and executive...  ...employees with free access to more than 5000 curated courses...  ...applicant’s gender, gender identity, sexual orientation, race, ethnicity... 
    Full time
    Temporary work
    Local area
    Flexible hours

    Synechron

    New York, NY
    1 day ago
  •  ...trusted advisor, strategist, and architect with a passion for solving...  ...of SAP Trading partner management or equivalent EDI Implementation...  ..., sexual orientation, gender identity or expression, genetic information...  ..., employees who have access to the compensation information... 
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    4 days ago
  • $99k - $252.45k

     ...Description & SummaryThe OpportunityAs an AI Architect Manager, you will design and implement...  ...pregnancy, sexual orientation, and gender identity); age; disability; genetic information...  ...to responsibilities such as accessing sensitive company or customer information... 
    Full time
    H1b

    PwC

    New York, NY
    3 days ago
  • $110.7k - $218.3k

     ...operators, creatives, designers, engineers, and architects. Our team balances business strategy, technology, creativity, and ongoing managed services to solve the biggest problems...  ...on January 22, 2027 Work you'll do An Identity Graph Architect is responsible for designing... 
    Local area
    Visa sponsorship

    Deloitte

    New York, NY
    2 days ago
  •  ...experience, and operational efficiency. Key Skills:Digital Employee Experience, Enterprise Architecture, End User Computing, Identity & Access Management, Networking, Automation, Telemetry, Solution Assessment, Technology Strategy, Roadmap Development.Travel may be required... 
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    3 days ago
  • $140k - $155k

     ...governance and executive stakeholder management. The successful candidate...  ...:Secure read-only access to SQL Server system metadata...  ...with the Data-Mesh / Enterprise Architect, and defend it at the architecture...  ...applicant’s gender, gender identity, sexual orientation, race, ethnicity... 
    Temporary work
    Immediate start
    Flexible hours

    Synechron

    New York, NY
    1 day ago
  •  ...disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship...  ...another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants... 
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    3 days ago
  • $119k - $299.93k

     ...OpportunityAs an AIT - AI/Blockchain Architect Senior Manager you will design and implement technology...  ..., sexual orientation, and gender identity); age; disability; genetic information...  ...relationship to responsibilities such as accessing sensitive company or customer... 
    Full time
    H1b
    Shift work

    PwC

    New York, NY
    2 days ago
  • $201.68k - $322.69k

     ...for the organizations you love Access on-demand professional...  ...I can succeed as a Lead Data Architect at Capital Group.”As a Lead Data...  ...architecture strategies, and data management solutions.You have deep...  ...(including gender and gender identity), pregnancy, childbirth and related... 
    Full time
    Temporary work
    Local area
    Flexible hours

    Capital Group

    New York, NY
    1 day ago
  • $175k - $210k

     ...we're building the future of investment management—powered by technology and driven by advisor...  ...-directed brokerage account option ~ Access to investment management and free...  ..., religion, marital status, age, gender identity, gender expression, sexual orientation,... 
    Casual work
    Work at office
    Relocation
    Afternoon shift

    VISE Inc

    New York, NY
    3 days ago
  • $150k - $200k

     ...We are looking for a Lead Architect – Azure & AI to join our growing...  ...lineage tracking, and metadata management across multiple environments....  ...security, cataloging, and access-control policies across all data...  ..., sexual orientation, gender identity or expression, or any other... 
    Full time
    Local area

    Fractal Analytics

    New York, NY
    1 day ago
  • $160k - $170k

     ...Legrand’s Power & Thermal Management Division is experiencing rapid global growth, driven...  ...opportunities, paid volunteer time, and access to active Employee Resource Groups that...  ...women in engineering and underrepresented identities. The culture emphasizes inclusion, flexibility... 
    Temporary work
    Remote work

    Iadugs

    New York, NY
    2 days ago
  • $125k - $150k

     ...Role: AI Lead Architect – RAG & Python Location: NYC, NY/Charlotte, NC We are...  ...Business for all Synechron employees with free access to more than 5000 curated courses. ~...  ...regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity,... 
    Full time
    Temporary work
    Flexible hours

    Synechron

    New York, NY
    4 days ago
  •  ...classification, data loss prevention, and governed access, so that enterprises can adopt AI and...  ...senior client stakeholders. Each Senior Manager is expected to engage credibly across...  ...status, sexual orientation, gender identity or expression, genetic information, marital... 
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    3 days ago
  •  ...Accenture’s more than 1,500 certified AWS architects across the company. Join our team and be...  ...status, sexual orientation, gender identity or expression, genetic information, marital...  ...applicant. Additionally, employees who have access to the compensation information of other... 
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    4 days ago
  • $200k - $220k

     ...seeking a Cloud AI Platform Architect (Anthropic and OpenAI) to join...  ...~ Enable self‑service access for approved teams, with guardrails...  ...Establish guardrails for cost management and forecasting, working with...  ..., sexual orientation, gender identity, disability, protected... 
    Temporary work
    Work at office
    Immediate start
    2 days per week
    3 days per week

    Fitch Group

    New York, NY
    1 day ago
  • $260k - $300k

     ...capabilities. Overview This EVP, Growth Architect on our newly won PepsiCo account is a...  ...learning agendas and ensure shared access to actionable, comparative insights across...  ...stronger. It means we honor and celebrate all identities, across all facets of intersectionality,... 
    Temporary work
    Freelance
    Seasonal work
    Flexible hours
    Shift work
    Early shift

    Zenith

    New York, NY
    1 day ago
  • $100k - $130k

     ...Our team of LEED accredited architects prioritize energy efficiency,...  ...also requires excellent project management skills to ensure the smooth...  ..., sexual orientation, gender identity, religion, national origin, age...  ...and HELP for help. You can access our privacy policy here: jobot... 
    Local area
    Flexible hours

    Jobot

    Atlantic City, NJ
    1 day ago
  • $100k - $130k

     ...Our team of LEED accredited architects prioritize energy efficiency,...  ...also requires excellent project management skills to ensure the smooth...  ..., sexual orientation, gender identity, religion, national origin, age...  ...and HELP for help. You can access our privacy policy here: jobot... 
    Local area
    Flexible hours

    Jobot

    New York, NY
    1 day ago
  • $148.19k - $198.17k

     ...future of Salesforce. About the Role Our architect team is organized into four domains that...  ...AI context), and Governance & Trust (identity, security, and audit). This req can land...  ...Trust): identity and permissions, data access, agent authority, human-in-the-loop controls... 

    Salesforce, Inc.

    New York, NY
    3 days ago
  • $80k - $100k

    About the job SNOWFLAKE ARCHITECT AND LEAD BOUNTY DESCRIPTION Industry...  ...requirements for accessing data. Design and implement Snowflake...  ...Level - Mid-Senior Management Experience Required - No Minimum...  ...sexual orientation, gender identity, physical or mental disability... 
    Full time
    Relocation package

    StaffWorthy

    New York, NY
    3 days ago
  •  ...Job Description Salesforce Architect 26-00151 New York, NY $1...  ...implement Data 360 solutions for identity resolution, ingestion,...  ...strategies, CI/CD, and release management strategies • Lead Architecture...  ...• Architect security and access models, including roles, teams... 
    Hourly pay

    The Custom Group of Companies

    New York, NY
    3 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Identity & Access Management Architect. Be the first to apply!