> Markdown version of [/jobs/ext/2003253-sr-staff-iam-architect](https://www.wearedevelopers.com/jobs/ext/2003253-sr-staff-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Staff IAM Architect - **Company:** UKG Inc. - **Location:** Lowell, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Foundry, Cyber Security, Information Systems, Software Design Patterns, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Role-Based Access Control, Openid Connect, Zero Trust Network Access, Security Assertion Markup Language (SAML), Session Management, Google Cloud, Enterprise Software Applications, Information Technology - **Published:** August 9, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/sr-staff-iam-architect-lowell-ma-usa-58873092 ## About the Role including * Improve security, scalability, and operational efficiency of core identity services * Perform security architecture reviews and threat modeling for identity-related initiatives * Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks * Identify and mitigate identity-related risks across the enterprise * Collaborate with Security Engineering, Platform Engineering, Infrastructure, Cloud Operations, and Enterprise Technology teams * Provide architectural guidance during projects, design reviews, and strategic initiatives * Create and maintain architecture documentation, standards, and implementation guidance * Mentor IAM engineers and contribute to the development of identity security best practices Tasks * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience * 8+ years of experience in Identity & Access Management, Security Architecture, or related security engineering roles * 0 _ years designing and implementing enterprise IAM architectures * Deep expertise in: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization frameworks * Strong understanding of: SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, Zero Trust principles, RBAC and ABAC models, Cloud identity architecture, Service accounts and machine identity management * Experience supporting cloud platforms such as Azure, AWS, or Google Cloud * Strong written and verbal communication skills with the ability to communicate architectural concepts to technical and non-technical audiences Key requirements * performance-based bonus plan * restricted stock unit awards ## Description Experteer Overview As a Sr. Staff IAM Architect, you define and evolve UKG's identity security architecture for a global workforce and cloud environments. You will act as the technical authority for identity across security, product, and infrastructure teams to build scalable, secure identity solutions. You'll drive modernization of authentication, access governance, and privilege management in a large, cloud-native platform. This role offers impact through shaping identity strategy, improving security posture, and enabling scalable operations. You will join a mission-driven security team that partners across the organization to protect critical workforce data. Compensation / Benefits * Define and maintain enterprise IAM reference architectures, standards, and design patterns * Develop scalable identity and access management solutions * Partner with business and technology stakeholders to align identity capabilities with security objectives * Evaluate emerging identity technologies and recommend architectural improvements * Design and optimize identity lifecycle management processes including provisioning, deprovisioning, role management, and access certification * Develop scalable RBAC and ABAC models across enterprise applications and platforms * Ensure identity governance solutions align with security, compliance, and business requirements * Support implementation and enhancement of IGA platforms * Drive modernization of enterprise authentication services and identity providers * Develop secure access patterns for workforce, partner, and third-party access scenarios * Design secure privileged access architectures across cloud, infrastructure, and application environments * Enable just-in-time (JIT) access, credential vaulting, session management, and privileged account governance * Support expansion of PAM capabilities across both human and non-human identities * Partner with platform and engineering teams to reduce standing privilege and enforce least privilege principles * Improve security, scalability, and operational efficiency of core identity services * Perform security architecture reviews and threat modeling for identity-related initiatives * Support audit, compliance, and regulatory requirements including SOC, ISO 27001, PCI, and privacy frameworks * Identify and mitigate identity-related risks across the enterprise * Collaborate with Security Engineering, Platform Engineering, Infrastructure, Cloud Operations, and Enterprise Technology teams * Provide architectural guidance during projects, design reviews, and strategic initiatives * Create and maintain architecture documentation, standards, and implementation guidance * Mentor IAM engineers and contribute to the development of identity security best practices Tasks * Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience * 8+ years of experience in Identity & Access Management, Security Architecture, or related security engineering roles * 3+ years designing and implementing enterprise IAM architectures * Deep expertise in: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Identity Lifecycle Management, Authentication and Authorization frameworks * Strong understanding of: SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, Zero Trust principles, RBAC and ABAC models, Cloud identity architecture, Service accounts and machine identity management * Experience supporting cloud platforms such as Azure, AWS, or Google Cloud * Strong written and verbal communication skills with the ability to communicate architectural concepts to technical and non-technical audiences Key requirements * performance-based bonus plan * restricted stock unit awards ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)