Sr. Enterprise Identity Architect

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology.Group/DivisionKLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.What You'll DoIn this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise.We are seeking a highly experienced Sr. Enterprise Identity Architect to lead the design and modernization of enterprise identity security across on‑prem and cloud environments. This role provides deep technical expertise and strategic direction across Identity & Access Management (IAM), Identity Governance & Administration (IGA), Privileged Identity Management (PIM), Single Sign-On (SSO), Cloud Identity, Active Directory, and Entra ID (Azure AD).As a senior architect, you will define enterprise identity architecture, drive Zero Trust initiatives, and collaborate with cross‑functional teams to implement scalable, secure, and compliant identity solutions.Key ResponsibilitiesDevelop and maintain the enterprise identity architecture blueprint across IAM, IGA, SSO, PIM, and cloud identity services.Establish identity standards, patterns, and reference architectures for on-premises and cloud environments.Define and drive Zero Trust identity strategy, modern authentication roadmap, and identity lifecycle transformation.Assess identity risk posture and recommend controls aligned with business and compliance requirements.Architect and implement identity lifecycle and governance solutions including role modeling, access certification, and automated provisioning/deprovisioning.Integrate IGA platforms with HR systems, AD/Entra ID, cloud applications, and SaaS platforms.Define RBAC/ABAC frameworks and enforce least privilege across the enterprise.Design and oversee PIM and privileged access architectures including just‑in‑time access, privileged session management, and secure admin tiering.Align privileged access models across AD, Entra ID, cloud workloads, servers, databases, and network systems.Provide architectural oversight for privileged access tools and secure credential management.Architect SSO integrations using SAML, OAuth, OIDC, WS‑Fed, and modern authentication protocols.Define centralized authentication patterns for cloud and on‑prem applications.Implement effective MFA, Conditional Access, and continuous authentication strategies.Provide architecture direction for Active Directory tiers, domain services, Group Policy structure, and identity security hardening.Lead hybrid identity design involving Entra ID, AAD Connect, federation, and modern authentication migration.Optimize identity infrastructure for scalability, resilience, and security.Architect cloud identity solutions across Azure, multicloud, and SaaS platforms.Guide modern identity adoption including passwordless, FIDO2, device identity, workload identity, and identity segmentation.Integrate cloud identity controls into enterprise identity governance and access workflows.Act as the senior subject matter expert (SME) for identity architecture across security, cloud, application, and infrastructure teams.Lead evaluation and adoption of new IAM, IGA, SSO, and PIM technologies.Provide architecture governance, design reviews, and mentorship to engineering teams.Partner with compliance and risk teams to support audits, certification processes, and regulatory reporting.Minimum QualificationsMinimum eight (8) years of proven experience in large enterprise companies.Minimum five (5) years of proven experience architecting and designing enterprise grade solutions.Hands on experience in IAM systems like Ping or Okta or Azure EntraID.Experience working with IGA tools like Sailpiont, Savyint etc., and PIM tools like CyberArc or BeyondTrust etc.,Experience with multi‑cloud identity (AWS, GCP).Experience driving large-scale identity modernization or cloud transformation programs.Knowledge of regulatory frameworks like SOX, HIPAA, PCI, ISO 27001, or NIST.Certifications in Identity and Security areas a huge plus.About KLAWe provide advanced inspection tools, metrology systems, process solutions, and computational analytics that make electronics possible, tackling complex challenges. From electron and photon optics to machine learning and data analytics, we seek perfection at the most fundamental level of matter in the universe. If you want to make electronics that push industries forward and make the world a better place, join us.Total RewardsBase Pay Range: $137,800.00 - $202,133.00 Annually Primary Location: USA-CA-Milpitas-KLAKLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.Use of AI Statement At KLA, our interviews seek to understand your individual skills, problem-solving approach and authentic thinking. To ensure a fair and consistent evaluation, the use of AI, recording tools or other technologies to generate, suggest or provide responses during interviews—whether virtual or in person—is not permitted unless explicitly approved in advance as part of a reasonable accommodation or invited by the interviewer. Use of these tools may interfere with our ability to evaluate your individual qualifications and affect your candidacy. KLA is committed to advancing innovation through responsible AI, and we value candidates who share this mindset.Equal Opportunity StatementKLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at View email address on click.appcast.io or at View phone number on click.appcast.io to request accommodation.For additional information, view the US Know Your Rights poster on the U.S. Equal Employment Opportunity Commission website.SummaryLocation: Milpitas, CAType: Full time