Identity & Access Management (IAM) Architect

The ideal candidate brings deep expertise in directory services, authentication systems, access governance, vault and secrets management, cloud identity integration, and PKI , along with a strong understanding of compliance frameworks such as ISO 27001, SOC 2, and NIST ., * Lead the architecture, design, and governance of enterprise IAM services , supporting business, security, and operational requirements.

• Design and manage directory and identity services including enterprise directory platforms and LDAP-based systems.
• Architect authentication and access control mechanisms for users, applications, and infrastructure, including strong and adaptive authentication models.
• Define and govern identity lifecycle processes covering onboarding, access changes, and offboarding for employees, contractors, and partners.
• Design secure access enforcement and entitlement models for enterprise systems and applications.
• Drive authentication modernization initiatives , reducing credential risk while improving user experience.
• Architect and integrate vault and secrets management capabilities for applications, services, and infrastructure.
• Familiarity with Public Key Infrastructure (PKI) , certificate-based trust models for enterprise use cases, certificate lifecycle processes including issuance, renewal, revocation, and automation.
• Support secure application integrations using certificates for TLS, mutual authentication, smart credentials, and signing use cases.
• Integrate IAM services with cloud identity platforms and hybrid environments as required.
• Work with federation standards and protocols such as SAML, OAuth, and OpenID Connect .
• Ensure IAM services are designed for high availability, resilience, and disaster recovery .
• Perform regular health checks, access reviews, and security assessments across IAM platforms.
• Troubleshoot and resolve complex identity, authentication, and access issues .
• Align IAM architecture and controls with ISO 27001, SOC 2, NIST, GDPR , and enterprise security policies.
• Support internal and external audits by providing documentation, evidence, and remediation plans.
• Define and track service metrics, SLAs, KPIs, and risk indicators for IAM services.
• Collaborate closely with IAM, Infrastructure, Security, Cloud, and Application teams globally.
• Provide architectural guidance, design reviews, and technical leadership across IAM initiatives.
• Contribute to change management, documentation, and governance processes using ITSM tools.
• Mentor engineers and lead cross-functional technical initiatives.

• 7+ years of experience in enterprise IT or Information Security , with strong specialization in Identity and Access Management .
• Proven experience designing and leading enterprise-scale IAM architectures .
• Strong expertise in directory services, authentication systems, access controls, and identity governance .
• Hands-on experience with LDAP-based platforms, strong authentication solutions, and access enforcement technologies .
• Experience designing and operating PKI and certificate lifecycle management solutions.
• Experience with vault or secrets management platforms and secure credential handling.
• Strong understanding of cloud identity integration and hybrid IAM models .
• Experience working with federation protocols and identity standards .
• Strong analytical and problem-solving skills with the ability to resolve high-impact security and access issues.
• Experience working with global teams and diverse stakeholders .
• Familiarity with ITIL processes (Incident, Change, Problem Management).
• Experience using service management tools .
• Ability and willingness to work onsite from the office in a collaborative environment.

Preferred Skills

• Experience supporting large-scale enterprise or regulated environments .
• Background in identity governance, cryptographic services, or credential management .
• Experience supporting audit, risk, and compliance activities .
• Prior experience in an architect, senior lead, or principal-level role .
• Relevant security or identity certifications.

• Lead strategic identity, authentication, and trust initiatives in a global enterprise.
• Influence how access and credentials are secured at scale.
• Work closely with cross-functional teams through in-person collaboration .
• Competitive compensation, benefits, and long-term career growth opportunities., The salary offered to a selected candidate will be based on multiple factors including location, hire grade, job-related knowledge, skills, experience, and with consideration of internal equity of our current team members. In addition to a comprehensive benefits package, candidates may be eligible for other forms of compensation such as participation in a bonus and a stock award program, as applicable.

For all sales roles, the posted salary range is the Target Total Cash (TTC) range for the role, which is the sum of base salary and target bonus amount at 100% goal achievement.

Applied Materials is a global leader in materials engineering solutions used to produce virtually every new chip and advanced display in the world. We design, build and service cutting-edge equipment that helps our customers manufacture display and semiconductor chips - the brains of devices we use every day. As the foundation of the global electronics industry, Applied enables the exciting technologies that literally connect our world - like AI and IoT. If you want to push the boundaries of materials science and engineering to create next generation technology, join us to deliver material innovation that changes the world.