We are seeking an experienced IAM Security Architect with foundational AI skills to design and implement robust Identity and Access Management solutions across enterprise, cloud, and hybrid environments. In this role, you will shape IAM architectures, strengthen access governance, and leverage AI-assisted tools to optimize identity security workflows while collaborating with cross-functional teams to embed IAM security into enterprise solutions. Responsibilities Design and implement security architectures and controls for Identity and Access Management (IAM) systems across enterprise, cloud and hybrid environments Gather business, technical and compliance requirements to design IAM solutions for new implementations, migrations and security improvements Define and improve IAM capabilities, including identity lifecycle management, provisioning/deprovisioning, SSO, federation, MFA, privileged access management and access governance Shape authentication, authorization and access control models, including RBAC, ABAC, least privilege and Zero Trust principles Conduct IAM security architecture reviews, risk assessments and access control design evaluations Develop IAM reference architectures, security standards, access control policies and identity governance guidelines Evaluate IAM technologies and solutions, including identity providers, IGA, PAM, federation platforms and cloud-native identity services Support IAM integrations with cloud platforms, SaaS applications, enterprise systems, directories and APIs Collaborate with cloud, infrastructure, development, security operations, compliance and enterprise architecture teams to integrate IAM security into enterprise solutions Enable IAM automation using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies Leverage AI-assisted tools and workflows to improve IAM activities, including identity and access risk analysis, access reviews and entitlement analysis, role and access policy analysis, provisioning workflow optimization, compliance reporting and evidence collection, as well as security scripting, documentation and repetitive task automation Identify opportunities for AI-assisted IAM automation while ensuring appropriate validation, data protection, auditability and human oversight Communicate IAM security risks, architectural decisions and remediation plans to stakeholders and security leadership Requirements Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience 5+ years of information security experience, with a focus on IAM, identity security architecture or IAM engineering Background in delivering or significantly contributing to IAM implementation, migration, integration or modernization projects Hands-on expertise with at least one enterprise IAM, IGA, PAM or identity federation platform Strong understanding of IAM principles, including identity lifecycle management, authentication, authorization, SSO, federation, MFA, RBAC/ABAC, least privilege and privileged access Practical experience with IAM architecture design, identity security controls, access policies or identity governance processes Knowledge of common IAM protocols and standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP or Kerberos Proficiency in IAM technologies such as Microsoft Entra ID, Active Directory, Okta, Ping Identity, SailPoint, Saviynt or CyberArk Understanding of cloud IAM concepts and identity security controls across at least one major cloud platform such as Azure, AWS or GCP Working knowledge of related security domains, including cloud security, network security, application security, data protection and security operations, without requiring deep specialization in each Familiarity with security architecture principles and frameworks such as Zero Trust, NIST or ISO 27001, as well as IAM automation, scripting, APIs and identity integration workflows Intermediate practical experience with AI-assisted tools and automation, including using AI tools for access analysis, security research and IAM troubleshooting, applying structured prompting for technical and security tasks, generating and validating scripts, queries, access policies and documentation with AI, simplifying repetitive IAM and security workflows, and basic experience configuring AI-assisted workflows or integrations Understanding of safe AI usage, including sensitive identity data protection, access control, auditability and validation of AI-generated outputs, with willingness to further develop AI automation skills Strong communication, collaboration and hands-on technical skills Nice to have Experience with IAM platforms such as ForgeRock, Auth0 or similar, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), CIAM or B2B/B2C identity scenarios Familiarity with cloud identity, workload identities, service principals, managed identities and hybrid identity architectures Background in integrating IAM solutions with SIEM/SOAR, security monitoring and automated response workflows Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Claude, LangChain or Power Automate, along with an understanding of AI security risks such as sensitive data exposure, prompt injection, excessive permissions and insecure AI tool usage Security or IAM certifications such as CISSP, CISM, CISA, CCSP, CCSK, Microsoft SC-300, Microsoft SC-100, Okta Certified Professional/Administrator/Consultant, or SailPoint, Saviynt, CyberArk or Ping Identity certifications; AI-related certifications such as Claude Certified Architect, AI-900: Microsoft Azure AI Fundamentals or AWS Certified AI Practitioner are a plus
