Cybersecurity IAM Architect - Staff Engineer

Experteer Overview As an IAM Architect, you will design enterprise-wide identity security architectures aligned to NIST standards and Zero Trust principles. You will translate business and regulatory needs into secure blueprints and reusable patterns, guiding cross-functional teams through secure-by-design implementation. You’ll lead architecture reviews, identify identity-related gaps, and drive governance and risk-mitigation across cloud, on-premises, SaaS, and hybrid environments. This role offers impact at scale, shaping secure identity for critical enterprise systems and AI-enabled services. Compensation / Benefits * Design and review enterprise IAM architectures across cloud, on-premises, SaaS, and hybrid environments * Develop secure design patterns for human and non-human identities and API access * Translate requirements into blueprints, reference architectures, and reusable identity patterns * Establish least-privilege models (RBAC, ABAC, PBAC) with context-aware controls * Drive governance, security reviews, and risk mitigation for IAM tech and AI agent identities * Collaborate with engineering, cloud, infrastructure, and AI teams to ensure secure deployment * Provide secure-by-design guidance throughout the system development lifecycle * Participate in governance boards and maintain IAM standards and policies * Mentor junior architects and communicate complex concepts to leadership Tasks * 7-10 years in cybersecurity with 3+ years in IAM/security architecture or related role * Deep working knowledge of NIST CSF, SP 800-53, SP 800-171, and SP 800-207 * Experience designing IAM architectures for enterprise systems, cloud, SaaS, APIs, and hybrid environments * Strong understanding of IAM domains: identity lifecycle, IGA, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, entitlement management, access reviews, and separation of duties * Hands-on familiarity with Okta, Microsoft Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos, and privileged access technologies * Strong understanding of LLMs, AI/GenAI, agent identity governance, and auditability of agent actions * Experience in regulated environments aligning identity controls to compliance frameworks * Excellent communication, collaboration, and executive-facing presentation skills * Preferred certifications (CISSP, CISM, CISA, CCSP) and experience with policy-as-code and DevSecOps Key requirements *

with governance, security reviews, and risk mitigation for IAM tech and AI agent identities * Collaborate with engineering, cloud, infrastructure, and AI teams to ensure secure deployment * Provide secure-by-design guidance throughout the system development lifecycle * Participate in governance boards and maintain IAM standards and policies * Mentor junior architects and communicate complex concepts to leadership Tasks * 7-10 years in cybersecurity with 3+ years in IAM/security architecture or related role * Deep working knowledge of NIST CSF, SP 800-53, SP 800-171, and SP 800-207 * Experience designing IAM architectures for enterprise systems, cloud, SaaS, APIs, and hybrid environments * Strong understanding of IAM domains: identity lifecycle, IGA, SSO, MFA, federation, PAM, RBAC, ABAC, PBAC, entitlement management, access reviews, and separation of duties * Hands-on familiarity with Okta, Microsoft Entra ID, SCIM, SAML, OAuth, OIDC, LDAP, Kerberos, and privileged access technologies * aa aaK_ understanding of LLMs, AI/GenAI, agent identity governance, and auditability of agent actions * Experience in regulated environments aligning identity controls to compliance frameworks * Excellent communication, collaboration, and executive-facing presentation skills * Preferred certifications (CISSP, CISM, CISA, CCSP) and experience with policy-as-code and DevSecOps Key requirements *