Lead IAM Architect

Responsibilities

• Own the migration architecture for transitioning existing identity solutions to a modern enterprise identity provider.
• Write code, configure APIs, and build proof-of-concept integrations during the identity modernization.
• Lead technical vendor evaluations and design proof-of-concepts using DRW’s real-world infrastructure and data.
• Design zero-trust token exchange for internal APIs and microservices, including governance of non-human identities.
• Bridge security, compliance, business, and engineering stakeholders and translate risks into pragmatic requirements.
• Ensure the enterprise identity provider integrates with custom internal applications.
• Design architectures for legacy migration, including the use of Identity-Aware Proxies as last-mile adapters.

Requirements

• Deep expertise in OIDC, OAuth 2.0, SAML, JWT, JWKS, RS256, and applied cryptography.
• Proven software or systems engineering background with strong infrastructure-as-code and programming experience.
• Proficiency in Go and/or Python is preferred for building custom glue code and SDKs.
• Understanding of machine identity paradigms including HashiCorp Vault, AWS IAM Roles, OIDC federation for CI/CD pipelines, and ephemeral certificate brokering.
• Ability to manage engineering, security, business, compliance, vendor, and executive stakeholders.
• Experience untangling legacy technical debt and applying pragmatic migration strategies.
• Strong system design skills and the ability to defend architectures before senior software engineers.
• Strategic ability to connect identity solutions with regulatory and compliance requirements.

Benefits

• Annual discretionary bonus eligibility.
• Medical, pharmacy, dental, and vision insurance.
• 401k with discretionary employer match.
• Short- and long-term disability insurance.
• Life and AD&D insurance.
• Health savings and flexible spending accounts.