Interview integrity requirement
*Candidates must personally complete all interviews and technical assessments. The use of proxies or third-party representatives during any stage of the hiring process is prohibited and will result in disqualification. Final candidates will be required to participate in at least one in-person interview. Some travel for this role is expected. Reasonable accommodations will be provided in accordance with applicable laws.*
Help us build secure, seamless access across a modern enterprise. As our Senior IAM Architect, you'll design and evolve identity platforms that keep the right people connected to the right resources—securely, reliably, and without friction—across on-prem, hybrid, and cloud environments. You'll partner closely with security, infrastructure, cloud, application, HR, and compliance teams to deliver solutions that balance strong controls with great user experience.
What You'll Do
Design and support hybrid identity architectures using Active Directory, Microsoft Entra ID, and Okta
Architect authentication, authorization, and federation patterns for workforce, partner, and service identities
Apply least-privilege models (RBAC, ABAC) and role lifecycle management
Design MFA, passwordless, conditional access, and adaptive authentication policies
Automate joiner/mover/leaver (JML) workflows and identity lifecycle processes
Integrate IAM platforms with HR systems, directories, and SaaS applications
Support identity incident response—investigating access misuse, auth failures, and compromise
Monitor identity signals and logs to strengthen detection capabilities
Produce architecture diagrams, standards, runbooks, and documentation
Provide design reviews and best-practice guidance to application and infrastructure teams
What You Bring
7+ years in security or identity architecture with hands-on enterprise IAM expertise
Advanced skills in Active Directory (domains, forests, trusts, GPOs), Microsoft Entra ID (Conditional Access, MFA, Identity Protection, PIM), and Okta (Workforce Identity, SSO, Lifecycle Management, Workflows)
Proven experience with hybrid AD/Entra ID architectures and directory synchronization
Strong background in identity lifecycle automation, role modeling, federation, Zero Trust design, PIM/PAM, access governance/certification, and large-scale directory transformations
Knowledge of Kerberos, LDAP, SAML, OAuth 2.0, and OpenID Connect
Excellent communication skills across technical and non-technical audiences
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent experience)
Work Style: Remote/hybrid with occasional in-person collaboration; camera-on virtual meetings.
What We Offer:
Full benefits starting Day 1: Medical, Dental, and Vision
401(k) with company match
Unlimited Flex Time Off plus 10 company-paid holidays
Remote-first role with monthly communication stipend
Professional development programs and tuition assistance
Home office equipment stipend
Employee resource groups and exclusive employee discounts