IAM Architect

IAM Architect

Location: Chaska MN (100% onsite)

Preferred Qualifications:

- Experience with supplier/vendor IAM federation in complex semiconductor supply chains.

- Background in IT/OT convergence security for smart factories and Industry 4.0 initiatives.

- Knowledge of chip design workflows, engineering collaboration platforms, and secure IP vaults.

- Relevant certifications: CISSP, CCSP, Microsoft Identity & Access, Okta Certified, ISA/IEC 62443

Cybersecurity Expert.

Required Skills & Experience:

8+ years of IAM experience, with at least 3 years in a strategic architecture role for a manufacturing or semiconductor enterprise.

Proven ability to secure both IT and OT environments in global industrial operations.

Expertise in IAM platforms (Okta, SailPoint, Ping, ForgeRock), PAM solutions (CyberArk, BeyondTrust), directory services & federation (LDAP, SAML, OAuth2, OpenID Connect, SCIM), Zero Trust IAM architecture for hybrid cloud & on-premises.

Deep understanding of semiconductor industry workflows, including EDA tools and IP lifecycle management.

Familiarity with industrial control system (ICS) security, OT protocols, and factory automation networks.

Strong knowledge of export control regulations (ITAR/EAR), IP protection strategies, and global data privacy compliance.

Key Responsibilities:

1. Semiconductor IP Protection:

Implement least privilege access to safeguard sensitive chip design files, EDA tools, and proprietary engineering data.

Architect IAM for engineering design workflows, integrating with EDA tools (Cadence, Synopsys, Mentor Graphics).

Ensure strict segregation of duties and data residency controls to comply with export controls (ITAR/EAR) and regional IP protection laws.

Develop federated identity and access models for secure collaboration with external R&D partners, foundries, and design houses.

2. Factory OT Security & Operational Continuity:

Design IAM solutions for Operational Technology (OT) environments, including MES, SCADA/PLC systems, and factory automation equipment.

Extend Zero Trust principles to the shop floor, securing remote vendor access for equipment maintenance without compromising uptime.

Integrate IAM with Industrial Control Systems (ICS), considering legacy equipment with limited native authentication capabilities.

Work with OT security teams to segment access between IT and OT networks, minimizing lateral movement risks in factories.

3. Global IAM Strategy & Governance:

Define the enterprise IAM roadmap for all global sites, aligning with manufacturing, R&D, and supply chain security requirements.

Standardize access provisioning workflows across factories, design centers, suppliers, and regional offices.

Develop role-based (RBAC) and attribute-based (ABAC) access models that address the needs of factory operators, R&D engineers, external contractors and vendors, and supply chain partners.

4. Cloud & Hybrid IAM:

Architect secure access to cloud-hosted semiconductor design environments and collaboration tools.

Integrate IAM for multi-cloud environments (Azure, AWS, GCP) supporting global engineering teams.

Enable secure identity federation for supply chain and ecosystem partners.

5. Risk Management & Compliance:

Ensure IAM policies meet semiconductor industry compliance standards, including NIST 800-53, IEC 62443 (OT security), ISO 27001, and export control regulations (ITAR/EAR).

Lead access certification campaigns and automate identity lifecycle management for employees, contractors, and vendors worldwide.

Provide IAM audit readiness for IP protection, export compliance, and global data privacy regulations (GDPR, local DPAs).

6. Technology Enablement & Integration:

Lead the evaluation, deployment, and integration of enterprise IAM platforms (SailPoint, ForgeRock, Okta Ping Identity) and Privileged Access Management (PAM) solutions (CyberArk, BeyondTrust).

Automate joiner-mover-leaver (JML) processes across IT, OT, and cloud environments.

Work closely with IT, OT, and cybersecurity teams to ensure high availability and minimal disruption in operations.