IAM Solutions Architect

Accountabilities:

• • Lead non-human identity program architecture covering discovery, inventory, lifecycle management, ownership, credential and secret management, rotation, attestation, and decommissioning.
  • Design reference architectures for workforce, customer, and non-human identity environments, including workloads, machine identities, service accounts, API credentials, bots, and AI agents.
  • Assess AI agent identity models, lifecycles, and control requirements as organizations adopt increasingly autonomous technologies.
  • Develop architecture review and cybersecurity artifacts, including reference architecture diagrams, data and process flows, detailed security diagrams, and technical documentation.
  • Lead program assessments, vendor and technology evaluations, future-state architecture, governance model design, platform architecture reviews, and product health checks.
  • Own solution architecture and design authority across non-human identity implementations and SailPoint engagements.
  • Lead design workshops and proofs of concept, establish technical decisions, and provide clear direction for engineering teams.
  • Define integration patterns, data models, access models, and non-functional requirements covering security, scalability, resiliency, and performance.
  • Communicate architecture decisions and implementation progress to technical and non-technical client stakeholders, supporting successful adoption of proposed solutions.
  • Provide technical guidance to resolve complex identity challenges while remaining engaged enough to understand implementation realities.
  • Support roadmap development, certification strategy, configuration and tuning, and program reporting.
  • Lead knowledge transfer and operating-model design to enable client teams to independently operate and evolve their identity programs.
  • Contribute to proposals, statements of work, and solution scoping when appropriate.

  Requirements:

  • 8+ years of experience in identity and access management, including significant experience as a solutions architect, technical lead, principal engineer, or similar senior technical role.
  • Strong expertise in at least one identity domain, such as identity governance, privileged access management, or identity provider and authentication platforms.
  • Experience with technologies such as SailPoint IdentityIQ or Identity Security Cloud, Saviynt, CyberArk, Delinea, BeyondTrust, Okta, Microsoft Entra ID, or Ping is highly relevant.
  • Broad understanding of IAM capabilities, including governance, privileged access, secrets management, certificate management, authentication, MFA, identity providers, and authorization.
  • Strong understanding of workforce, customer, and non-human identities, with the ability to identify and assess different NHI types and their lifecycle characteristics.
  • Ability to assess enterprise environments and identify non-human identities, ownership models, authentication methods, and lifecycle requirements.
  • Working knowledge of AI agent types, lifecycles, and associated identity and security controls; direct experience governing agent fleets is not required.
  • Ability to create detailed technical and security artifacts suitable for architecture review boards and cybersecurity reviews.
  • Strong client-facing communication skills, with the ability to engage technical architects and clearly explain complex decisions to non-technical stakeholders.
  • Ability to challenge client assumptions constructively, explain technical risks, and recommend practical solutions.
  • Comfortable working independently on smaller engagements and taking ownership of the client relationship and technical outcome.
  • Demonstrated curiosity and continuous learning, including evidence of self-directed technical development such as home labs, side projects, or independently acquired skills.
  • U.S.-based and authorized to work in the United States.
  • Experience with NHI, machine identity, secrets management, certificate lifecycle management, cloud identity, Zero Trust, or regulated industries is a plus.
  • SailPoint, CyberArk, Okta, Microsoft Entra, CISSP, or similar certifications are helpful but are not required.
  • Prior experience with a formal architect title is not required when equivalent technical depth and architecture experience can be demonstrated.

  Benefits:

  • Remote-first position for U.S.-based professionals.
  • Flexible working hours, with client time zones taking priority when required.
  • 20 days of paid time off, provided as an annual bucket.
  • Paid holidays.
  • Medical, dental, and vision coverage through Aetna.
  • 401(k) with company match, including a full match on the first 3% and half match on the next 2%.
  • Annual performance-based bonus eligibility.
  • Sponsored training and professional certifications across relevant identity platforms.
  • Structured enablement for emerging non-human identity technologies.
  • Direct client exposure and meaningful ownership of complex identity architecture initiatives.
  • Opportunity to contribute to the development of a growing identity services practice.