Lead IAM Solution Architect (Privileged Access & Cloud Identity)

Overview

Lead IAM Solution Architect (Privileged Access & Cloud Identity)

Location: Remote (Continental US – working Core EST hours)
Duration: 12-Month Contract (Potential for Extension)

About the Role
The Identity and Access Management (IAM) team is seeking an experienced Lead IAM Solution Architect to drive the design, engineering strategy, and execution of enterprise identity solutions. In this role, you will serve as the architectural authority for secure, scalable, and modern identity services supporting our digital transformation.

You will partner closely with cybersecurity leadership, cloud engineering teams, and business stakeholders to define robust IAM roadmaps, mature our Privileged Access Management (PAM) posture, and safeguard modern cloud environments.

Must Haves: 

• 5+ years Privileged Access Management experience
• 8 years Active directory experience
• 3 years ENTRA experience
• 4 years of understanding of identity and access management controls experience.

(Must show this experience and years of experience at the top of your resume)

Key Responsibilities

• Architectural Leadership: Define and maintain enterprise IAM reference architectures, design patterns, and multi-year strategic roadmaps across authentication, authorization, privileged access, and identity lifecycle management.
• PAM & Cloud Identity Strategy: Drive advanced architectural solutions for Privileged Access Management (CyberArk, BeyondTrust, HashiCorp, etc.) and identity federation across hybrid environments (Active Directory, Microsoft Entra ID).
• Cross-Functional Integration: Partner with infrastructure, application, and cloud teams (AWS, Azure, GCP) to seamlessly integrate enterprise systems, APIs, and SaaS platforms using modern protocols.
• Technical Governance & Compliance: Ensure all identity solutions comply with regulatory standards and frameworks (SOX, PCI-DSS, GDPR, NIST, Zero Trust guidelines).
• Vendor & Tool Evaluation: Lead technical evaluations, proof-of-concepts (POCs), and procurement analyses for next-generation IAM products and tooling.
• Engineering Guidance: Provide technical mentorship to IT implementation teams, establishing best practices for secure integration, coding standards, and lifecycle management.

What You Bring (Minimum Qualifications)

• Identity & Access Management: 4+ years dedicated to defining and implementing enterprise IAM governance and architectural controls.
• Privileged Access Management (PAM): 5+ years hands-on/architectural experience designing and deploying enterprise PAM frameworks.
• Directory Services & Federation: 8+ years experience with Active Directory and 3+ years architecting Microsoft Entra ID (formerly Azure AD) solutions.
• Standards & Protocols: Strong practical mastery of identity standards including SAML 2.0, OAuth 2.0, OIDC, SCIM, RBAC, and ABAC.

Preferred Qualifications

• Experience architecting identity solutions in multi-cloud environments (AWS, Azure, GCP).
• Familiarity with regulatory frameworks governing financial services (SOX, PCI-DSS).
• Industry certifications such as CISSP, CISM, Certified Identity and Access Manager (CIAM), or vendor-specific certifications (Microsoft, CyberArk).

Our Way of Working
This position is fully remote within the continental United States (requiring core working hours in Eastern Standard Time). While day-to-day operations are remote, occasional travel may be required to a regional Hub or local office for strategic team summits, interactive planning sessions, and culture events.