IAM Architect

Note: This is a 6 months contract-to-hire role.

Minimum Qualifications
· 10 or more years of progressive IAM architecture, engineering, or solution design experience in complex enterprise environments.

· Deep breadth across multiple IAM domains and platforms, with demonstrated ability to design integrated cross-platform solutions.

· Proven experience with SailPoint IdentityIQ or Identity Security Cloud, PingFederate, PingDirectory, Microsoft Entra, Active Directory, and ServiceNow.

· Deep knowledge of IAM principles such as identity lifecycle management, just-in-time provisioning, SCIM, OAuth/OIDC, SAML, LDAP, APIs, cloud identity, privileged access management, and Zero Trust principles.

· Experience developing architecture diagrams, standards, roadmaps, design decisions, and executive-level recommendations.

· Strong communication and influence skills, with the ability to translate between technical, security, risk, and business audiences.

· Experience using observability and analytics platforms such as Datadog and Splunk and integrating identity data with HRIS and other enterprise systems.

Preferred Qualifications
· Hands-on experience with One Identity Safeguard, HashiCorp Vault, RSA, or comparable PAM and MFA technologies.

· Experience designing identity controls for AI agents, workloads, service accounts, APIs, and other non-human identities on Sailpoint Agentic Fabric/Entro, Ping Agent IAM Core, PingAuthorize, or comparable agentic identity management platforms.

· Experience with product selection, vendor evaluation, platform modernization, and transition from on-premises to SaaS or cloud delivery models.

· Relevant security, cloud, or architecture certifications.