> Markdown version of [/jobs/ext/2656682-iam-architect-entra-id-focused-hybrid-in-plano](https://www.wearedevelopers.com/jobs/ext/2656682-iam-architect-entra-id-focused-hybrid-in-plano). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect (Entra ID-Focused) Hybrid in Plano - **Company:** NTT America, Inc. - **Location:** Plano, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $116,000.0 - $164,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Business Software, Continuous Integration, Federated Identity Management, Identity and Access Management, Python (Programming Language), Key Management, Microsoft Software, OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Systems Integration, Google Cloud, Cyberark, Delivery Pipeline, HR Software, Kubernetes, SailPoint, Terraform, Workday, Servicenow - **Published:** August 10, 2026 - **Apply:** https://dejobs.org/x/x/043FCAD21E704AFD9431234709D2DBE4/job/ ## About the Role * 10+ years in IAM architecture, engineering, and/or senior technical delivery roles. * Proven hands-on experience with SailPoint and CyberArk implementations. * Deep expertise in Entra ID / Azure AD, Identity federation, conditional access, and hybrid identity patterns. * Strong knowledge of PKI design and certificate lifecycle automation. * Proficiency with identity protocols (SCIM, SAML, OAuth/OIDC), and automation tools (PowerShell, Python, Terraform). * Experience with ITSM (ServiceNow), CI/CD integration, and audit evidence delivery. Preferred Qualifications : * Certifications: SailPoint, CyberArk, Microsoft Identity/Entra, CISSP * Experience integrating HR systems (Workday) and securing cloud native workloads (Kubernetes RBAC, secrets management). Ideal Soft Skills and Logistics : * Strong communicator able to influence senior stakeholders and translate business needs into secure identity designs. * Analytical leader -with a track record of driving automation, reducing risk, and improving audit posture. ## Description * Architectural Leadership -Define IAM target state, roadmaps, and standards covering IGA, PAM, Access Management, and PKI; produce architecture artifacts and governance models. * SailPoint IGA Ownership - Design role models, entitlement mappings, connector strategy, reconciliation, and certification campaigns; guide complex integrations with HR and business applications. * CyberArk PAM Strategy - Architect vault topology, privileged session controls, credential rotation, and onboarding patterns for service and privileged accounts. * Entra ID and Cloud Identity - Design Entra ID/Azure AD identity flows, conditional access, B2B/B2C scenarios, and hybrid sync patterns; align cloud IAM across Azure, AWS, and GCP. * PKI and Certificate Automation - Define PKI trust model, certificate issuance/renewal automation, and integration with DevOps pipelines and service identities. * Automation and Iac- Drive SCIM/SAML/OIDC connector automation, Terraform/IaC for identity infrastructure, and scripting to reduce manual provisioning. * Risk, Compliance, and Audit- Ensure audit readiness, lead access review programs, and translate regulatory requirements into technical controls. * Mentorship and Delivery - Lead technical teams, review designs, and mentor L1-L3 engineers to raise operational maturity. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [WeAreDevelopers LIVE - How DevRel Makes Tech More Human](https://www.wearedevelopers.com/videos/2149-wearedevelopers-live-how-devrel-makes-tech-more-human) - [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)