Sr. Domain Architect, IAM

Lead the design and governance of the enterprise IAM architecture

• Serve as the design authority across identity platform teams

• Develop and maintain the IAM technology roadmap

• Evaluate build vs. buy vs. retain strategies for identity technologies

• Oversee implementation of identity solutions and review engineering work

• Collaborate with technical and business stakeholders

• Define identity governance standards and compliance requirements

• Ensure IAM solutions meet healthcare regulatory requirements

• Mentor architects and platform administrators

• Review consultants, technical solutions, and statements of work

• Act as an escalation point for complex IAM issues

• Drive automation, process improvements, and operational maturity

Lead identity platform rationalization and governance decisions across SailPoint, Entra ID, ServiceNow, and related systems

Bachelor’s degree in Computer Science, Information Technology, or related field

• 10+ years of IT Architecture and/or Identity & Access Management (IAM) experience

• Healthcare industry experience

• Proven experience designing and implementing enterprise identity architectures

• Deep knowledge of identity platforms including Entra ID, SailPoint, Active Directory, ServiceNow Identity Flows, and SAML/OIDC Federation

• Experience with identity governance across HCM, ITSM, Directory, and IGA environments

• Enterprise-scale role mining and birthright access design experience

• TOGAF or C4 Model architecture framework experience

• Experience leading and directing engineering teams and consultants

• Knowledge of HIPAA and healthcare security/privacy regulations

• Strong Microsoft Entra ID design experience (Dynamic Groups, Access Packages, Access Reviews, PIM, Conditional Access, Duo MFA)

• SailPoint expertise, including connectors, aggregations, provisioning, entitlements, and governance

• ServiceNow + Integration Hub fulfillment design experience

• Workday-driven lifecycle management design experience

• One of the following certifications:

• Microsoft SC-300

• SailPoint Certification (IdentityNow/IIQ)

IDPro CIDPRO - Epic security build experience (templates, subtemplates, EMP provisioning, role modeling, group hygiene)

• CISSP certification

• AWS Certified Security - Specialty certification

• Additional identity/security certifications

• Vendor management experience with Microsoft, SailPoint, and ServiceNow

• Experience with Entra B2B external identity solutions