IAM Architect

IAM Architect

We are seeking a Cyber Security Architect to contribute to the design and implementation of our identity and access management (IAM) solutions. This role involves collaborating with various technology teams to develop and deploy secure, scalable IAM patterns. The position focuses on enhancing security through modern authentication methods and ensuring robust access controls across the enterprise.

Location: Charlotte, North Carolina or Atlanta, Georgia (Onsite)

Key Responsibilities

• Collaborate with Cyber and Enterprise architecture teams to select and develop appropriate IAM patterns and translate them into engineering designs.
• Partner with subject matter experts across technology teams, including End User tech and Network services, on IAM design, configuration, and implementation.
• Work with the Project Management team to identify and estimate technical tasks for program deliverables.
• Configure Entra ID identity, trust settings, and entitlement management.
• Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls.
• Migrate federated applications and validate authentication flows.
• Develop and support processes for procuring and managing FIDO2 keys and passkeys, and support Windows Hello for Business rollouts.
• Enable step-up authentication for sensitive operations and secure privileged access paths.

Required Qualifications

Education: A Bachelor's Degree is not required for this position.

Technical Skills:

• Identity & Access Management (IAM) Architecture, including designing and implementing enterprise identity patterns and authentication models.
• Microsoft Entra ID Administration & Engineering, including configuration of tenants, trust relationships, and application integrations.
• Zero Trust & Conditional Access Design, with experience in implementing risk-based access controls and adaptive security measures.
• Strong Authentication Technologies such as FIDO2, Passkeys, and Windows Hello for Business (WHfB).
• Identity Federation & Application Migration, including the ability to migrate federated applications and validate SAML/OIDC/OAuth flows.
• Privileged Access Management (PAM) & Secure Administration to secure privileged accounts and implement least-privilege models.
• IAM Program Delivery & Cross-Functional Engineering to collaborate with various teams to deploy IAM solutions at an enterprise scale.

Preferred Qualifications

• Experience with Identity Governance & Administration (IGA) tools such as SailPoint, Saviynt, or Entra ID Governance.
• Knowledge of Identity Threat Detection & Incident Response using solutions like Microsoft Defender XDR, Entra Identity Protection, or Sentinel.
• Experience with Identity Governance Automation using PowerShell, Graph API, Logic Apps, or Terraform.