Identity Architect

Responsible for the architecture, engineering, automation, integration, and continuous improvement of enterprise identity services and access governance capabilities. Serves as the senior technical authority for Finance of America’s Identity and Access Management (IAM) program. Provides technical leadership across identity lifecycle management, authentication, authorization, privileged access management, access governance, and identity security initiatives. Working closely with Security, Infrastructure, Enterprise Applications, Compliance, and IAM Operations to design and deliver scalable identity solutions that strengthen security, improve operational efficiency, and support regulatory compliance. Advances the organization’s IAM maturity by driving automation, modern identity architecture, role-based access control (RBAC), privileged access governance, and enterprise-wide identity integration strategies., * Serves as the senior technical lead and primary subject matter expert for enterprise IAM technologies and services.

• Owns the technical direction and engineering roadmap for the IAM program with minimal oversight.
• Establishes IAM architecture standards, engineering best practices, and implementation patterns.
• Leads technical design reviews and provide architectural guidance across enterprise initiatives.
• Evaluates emerging IAM, Identity Governance (IGA), and security technologies and recommend strategic investments.
• Designs and maintains IAM solutions across Active Directory, Microsoft Entra ID, cloud platforms, and enterprise applications.
• Leads automation initiatives using PowerShell, APIs, orchestration platforms, and workflow technologies.
• Designs integrations between HR systems, ITSM platforms, IAM solutions, and business applications.
• Reduces manual effort through automation, self-service capabilities, and process optimization.
• Leads the design and implementation of enterprise Role-Based Access Control (RBAC) and entitlement governance.
• Develops scalable access models and governance standards supporting least privilege and regulatory compliance.
• Evaluates, recommends, and helps implement Identity Governance and Administration (IGA) platforms.
• Designs identity lifecycle processes for onboarding, transfers, role changes, and terminations. Improves provisioning, deprovisioning, certification, and access review processes through automation.
• Leads privileged access governance, service account management, SSO, MFA, federation, and Zero Trust initiatives.
• Ensures IAM controls align with regulatory, audit, and cybersecurity requirements.
• Partners with Security Architecture and Engineering to strengthen enterprise identity controls.
• Develops enterprise IAM standards, operational procedures, and engineering documentation.
• Serves as the highest technical escalation point for complex IAM issues.
• Drives continuous process improvement and organizational maturity across the IAM program.
• Performs other duties as assigned.

Reports To

• Director, IAM

• Minimum 7 years of experience in IAM, Identity Engineering, Cybersecurity Engineering, or related disciplines.
• SC-300, CISSP, CISM, or equivalent certifications.
• Deep expertise in Active Directory, Microsoft Entra ID, authentication, federation, RBAC, and access governance.
• Advanced PowerShell scripting and automation experience.
• Experience evaluating or implementing Identity Governance and Administration (IGA) solutions.
• Experience designing enterprise IAM integrations using APIs and workflow platforms.
• Demonstrated ability to independently lead enterprise technical initiatives.
• Excellent communication, organizational, and stakeholder management skills.
• Experience with SailPoint, Omada, Saviynt, Microsoft Entra Suite, or similar IGA platforms.
• Experience integrating HRIS and ITSM platforms into IAM workflows.
• Knowledge of Zero Trust architecture and identity security frameworks.

Qualifications - Education - Required

• Bachelor’s Degree or comparable qualifications

Qualifications - Education - Field(s)/Profession(s)

• Computer Science, Cybersecurity, Information Technology, or related field.

The base salary range for this position is ($120,000 - $140,000) inclusive of all geographical differences in the labor market. The base salary for the position will be determined based on factors such as the candidate’s work location, skills, education, and experience. In addition to those factors, we believe in the importance of pay equity and consider the internal equity of our current team members in determining any final offer. We offer a competitive benefits package including health, dental, vision, life insurance, paid time-off benefits, flexible spending account, 401(k) with employer match, and ESPP.

Finance of America helps homeowners 55+ access the equity they’ve built while staying in full control of their home and their financial future. Through a range of reverse mortgage solutions, we help customers shape the retirement they’ve earned while continuing to evolve how we serve and work together.