Sr. Staff IAM Architect

UKG Inc.
Seattle, WA, United States
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Cyber Security Information Systems Software Design Patterns Identity and Access Management Lightweight Directory Access Protocols (LDAP) OAuth OpenID Role-Based Access Control Zero Trust Network Access
+5 more
Security Assertion Markup Language (SAML) Session Management Google Cloud Enterprise Software Applications Information Technology

Job description

Experteer Overview As an IAM Architect at UKG, you will define and evolve the identity security architecture for a global workforce platform. You will partner with security, product, and infrastructure teams to design scalable, secure identity solutions that support cloud environments. Your work enables secure access, governance, and modernization across enterprise apps and services. This is a strategic, hands-on role with a clear impact on trust, security posture, and scale, shaping how millions of workers access critical systems. Compensation / Benefits * Define and maintain enterprise IAM reference architectures and design patterns * Develop scalable identity and access management solutions * Collaborate with stakeholders to align identity capabilities with security objectives * Evaluate emerging identity technologies and propose architectural improvements * Design and optimize identity lifecycle management (provisioning, deprovisioning, role management, access certification) * Develop RBAC and ABAC models across enterprise applications * Ensure identity governance aligns with security and compliance requirements * Support IGA platform implementation and enhancement * Drive modernization of authentication services and identity providers * Design secure access patterns for workforce, partner, and third-party access * Create privileged access architectures across cloud, infrastructure, and apps * Enable just-in-time access, credential vaulting, session management, and privileged account governance * Expand PAM for human and non-human identities * Promote least privilege with platform and engineering teams * Improve security, scalability, and operational efficiency of core identity services * Conduct security architecture reviews and threat modeling * Support audit, compliance, and regulatory requirements (SOC, ISO 27001, PCI, privacy) * Identify and mitigate identity-related risks * Provide architectural guidance during projects and design reviews * Create architecture documentation and implementation guidance * Mentor IAM engineers and share best practices Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience * 8+ years in Identity & Access Management, security architecture, or related roles * 3+ years designing and implementing enterprise IAM architectures * Deep expertise in IGA, PAM, Identity Lifecycle Management, and authentication/authorization frameworks * Strong understanding of SAML, OAuth 2.0, OIDC, LDAP, SCIM, Zero Trust, RBAC/ABAC, cloud identity * Experience with cloud platforms (Azure, AWS, GCP) * Strong written and verbal communication for technical and non-technical audiences Key requirements * performance-based bonus * restricted stock units * comprehensive benefits * total compensation package

Requirements

Benefits documentation and implementation guidance * Mentor IAM engineers and share best practices Tasks * Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience * 8+ years in Identity & Access Management, security architecture, or related roles * 3+ years designing and implementing enterprise IAM architectures * Deep expertise in IGA, PAM, Identity Lifecycle Management, and authentication/authorization frameworks * Strong understanding of SAML, OAuth 2.0, OIDC, LDAP, SCIM, Zero Trust, RBAC/ABAC, cloud identity * Experience with cloud platforms (Azure, AWS, GCP) * Strong written and verbal communication for technical and non-technical audiences Key requirements * performance-based bonus * restricted stock units * comprehensive benefits * total compensation package

About the company

Experteer Overview As an IAM Architect at UKG, you will define and evolve the identity security architecture for a global workforce platform. You will partner with security, product, and infrastructure teams to design scalable, secure identity solutions that support cloud environments. Your work enables secure access, governance, and modernization across enterprise apps and services. This is a strategic, hands-on role with a clear impact on trust, security posture, and scale, shaping how millions of workers access critical systems. Compensation / Benefits * Define and maintain enterprise IAM reference architectures and design patterns * Develop scalable identity and access management solutions * Collaborate with stakeholders to align identity capabilities with security objectives * Evaluate emerging identity technologies and propose architectural improvements * Design and optimize identity lifecycle management (provisioning, deprovisioning, role management, access certification) *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · WWC 2024

1:30 min

Operating developer-friendly identity infrastructure using Affinity Elements

Adam Larter Adam Larter · WWC 2024

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · WWC 2024

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

Videos

See all

Related articles

See all