Security Architect - Architecture

A global consumer products organization is seeking an IAM Architect to help advance enterprise identity security across a complex, rapidly evolving technology environment. Based in Los Angeles, California, the organization supports global operations spanning cloud platforms, enterprise applications, infrastructure, and digital customer experiences. This is an opportunity to provide technical leadership while remaining hands-on with the architecture and implementation of modern identity solutions.

The IAM Architect will own and shape identity architecture across workforce IAM, customer identity, privileged access, identity governance, non-human identities, and third-party access. This role translates business, security, and operational requirements into scalable identity solutions while remaining directly involved in design, integration, testing, implementation, and complex troubleshooting. Own end-to-end architecture for workforce IAM, customer identity, privileged access, identity governance, and non-human identities.
Lead technical design reviews and provide architecture guidance to application, infrastructure, cloud, security, and engineering teams.
Design, integrate, test, and troubleshoot enterprise IAM solutions from proof of concept through production implementation.
Architect identity lifecycle and access controls for employees, contractors, third parties, applications, workloads, and service accounts.
Advance access governance through role and entitlement design, certifications, approvals, segregation of duties, and policy enforcement.
Identify and reduce identity-related risks involving credentials, tokens, sessions, federation, privileged access, and machine identities.
Develop vendor-neutral integration patterns across identity providers, cloud IAM, privileged access, governance, security, and service management platforms.
Partner with security operations teams to improve identity telemetry, detection capabilities, investigation workflows, and incident response.
Automate IAM processes using APIs, scripting, workflow automation, and modern software engineering practices.
Hands-on architecture role with significant technical ownership and enterprise-wide influence
Opportunity to shape modern identity security capabilities across human, privileged, customer, workload, and machine identities
High-visibility position partnering across cybersecurity, infrastructure, cloud, application, and business teams
Strong experience with enterprise identity platforms such as Okta, Ping Identity, Entra ID, or comparable technologies.
Experience designing security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials.
Strong technical leadership and communication skills with the ability to influence architecture and security decisions across teams.
Experience supporting global, hybrid, and multi-cloud IAM environments.
Experience with identity threat detection and response, attack-path analysis, or identity exposure management.
Experience designing customer identity and access management solutions.
Experience integrating identity platforms with security operations and monitoring capabilities.
Relevant identity, cybersecurity, cloud, or architecture certifications.
Experience leading complex IAM implementations while mentoring engineers and establishing technical standards.
10% discretionary annual bonus opportunity

• Comprehensive medical, dental, and vision coverage
• Retirement savings benefits
• Paid time off and company holidays