> Markdown version of [/jobs/ext/2976524-iam-architect](https://www.wearedevelopers.com/jobs/ext/2976524-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect - **Company:** Robert Half - **Location:** Los Angeles, CA, United States - **Salary:** $180,000.0 - $220,000.0 - **Contract:** Temporary contract - **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Cloud Computing, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Lightweight Directory Access Protocols (LDAP), OAuth, Openid Connect, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Engineering, Systems Integration, Scripting, Okta, Multi-Cloud, Infrastructure Automation Frameworks - **Published:** September 18, 2026 - **Apply:** https://www.dice.com/job-detail/b44d9622-0947-42be-9968-b007f94c12f9 ## About the Role * Extensive experience designing, implementing, integrating, and securing enterprise Identity and Access Management solutions. * Proven experience as a hands-on IAM Architect, Lead IAM Engineer, Solution Architect, or equivalent technical leader. * Deep expertise across identity lifecycle management, authentication, authorization, federation, privileged access, identity governance, and non-human identities. * Strong experience with enterprise identity platforms such as Okta, Ping Identity, Entra ID, or comparable technologies. * Advanced knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, APIs, federation, tokens, and sessions. * Strong understanding of Zero Trust, least privilege, adaptive access, identity threat mitigation, and modern authentication controls. * Experience designing security and governance controls for privileged accounts, service accounts, application identities, workloads, secrets, and machine credentials. * Strong technical leadership and communication skills with the ability to influence architecture and security decisions across teams., * Experience supporting global, hybrid, and multi-cloud IAM environments. * Experience with identity threat detection and response, attack-path analysis, or identity exposure management. * Hands-on experience automating IAM capabilities using scripting, APIs, Infrastructure as Code, and workflow automation. * Experience designing customer identity and access management solutions. * Experience implementing just-in-time privileged access and phishing-resistant authentication. * Experience integrating identity platforms with security operations and monitoring capabilities. * Relevant identity, cybersecurity, cloud, or architecture certifications. * Experience leading complex IAM implementations while mentoring engineers and establishing technical standards. ## Description * Own end-to-end architecture for workforce IAM, customer identity, privileged access, identity governance, and non-human identities. * Lead technical design reviews and provide architecture guidance to application, infrastructure, cloud, security, and engineering teams. * Design, integrate, test, and troubleshoot enterprise IAM solutions from proof of concept through production implementation. * Architect identity lifecycle and access controls for employees, contractors, third parties, applications, workloads, and service accounts. * Advance access governance through role and entitlement design, certifications, approvals, segregation of duties, and policy enforcement. * Design modern authentication and authorization solutions using Zero Trust, least privilege, adaptive access, and phishing-resistant authentication principles. * Identify and reduce identity-related risks involving credentials, tokens, sessions, federation, privileged access, and machine identities. * Develop vendor-neutral integration patterns across identity providers, cloud IAM, privileged access, governance, security, and service management platforms. * Partner with security operations teams to improve identity telemetry, detection capabilities, investigation workflows, and incident response. * Automate IAM processes using APIs, scripting, workflow automation, and modern software engineering practices. Additional Details * Work model: Hybrid three onsite days * Hands-on architecture role with significant technical ownership and enterprise-wide influence * Opportunity to shape modern identity security capabilities across human, privileged, customer, workload, and machine identities * High-visibility position partnering across cybersecurity, infrastructure, cloud, application, and business teams ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)