> Markdown version of [/jobs/ext/3137570-identity-architect](https://www.wearedevelopers.com/jobs/ext/3137570-identity-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Architect

- **Company:** Job Cloud Inc.
- **Location:** Dallas, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Application Integration Architecture, Audit Trail, User Authentication, Microsoft Azure, Cyber Security, Information Systems, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Data Streaming, Systems Integration, IT General Controls (ITGC), Cyberark, IT Architecture, Multi-Cloud, SailPoint
- **Published:** September 29, 2026
- **Apply:** https://www.dice.com/job-detail/2c92f5be-a606-4ada-a551-8cc2165fcd55

## About the Role

· 10 or more years of progressive experience in identity, access management, cybersecurity, infrastructure, enterprise architecture, or a closely related discipline.

· 7 or more years of hands-on IAM architecture or senior IAM engineering experience in a large enterprise environment.

· Strong experience with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity, directory synchronization, authentication, authorization, Conditional Access, MFA, and privileged access.

· Demonstrated experience designing or integrating at least two enterprise IAM platforms, with Saviynt preferred and SailPoint accepted.

· Experience with CyberArk or a comparable PAM platform, secrets management, and privileged identity controls.

· Strong understanding of IAM governance, lifecycle management, access reviews, role-based access control, segregation of duties, least privilege, and audit evidence.

· Practical knowledge of AWS and Azure identity and security models.

· Experience with APIs, application integration patterns, federation, SAML, OAuth 2.0, OpenID Connect, SCIM, and automation.

· Ability to analyze complex environments, make architecture decisions, document them clearly, and influence stakeholders without direct authority.

· Ability to work onsite in the Dallas-Fort Worth area approximately 2 to 3 days per week.

· Preferred qualifications:

· Experience in electric utilities, critical infrastructure, North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Sarbanes-Oxley Act (SOX), IT general controls, or similarly regulated environments.

· Microsoft identity or security certification, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Saviynt, SailPoint, CyberArk, AWS, or Azure certification.

· Experience with identity threat detection and response, identity security posture management, service-account governance, or non-human identity programs.

· Experience building identity standards, operating models, roadmaps, and governance forums.

Tools and Technologies:

 * Microsoft Active Directory
 * Microsoft Entra ID
 * Azure
 * AWS
 * Saviynt or SailPoint
 * CyberArk or comparable PAM platforms
 * MFA solutions
 * Secrets-management technologies
 * PowerShell
 * Python
 * APIs
 * SCIM
 * SAML
 * OAuth 2.0
 * OpenID Connect

## Description

Position Overview: The Identity Architect will define and guide an enterprise identity architecture that connects authentication, identity governance, privileged access, secrets management, identity security, and multi-cloud identity into a cohesive operating model. This role will help evolve identity and access management (IAM) from platform-specific activities into an identity-as-a-service capability that enables the business while improving security, auditability, and user experience. The architect will combine technical depth, practical judgment, and strong communication to guide technical and business stakeholders through architecture decisions and implementation paths., · Own and maintain the target-state IAM architecture, reference patterns, principles, standards, and technology roadmap.

· Assess current identity capabilities and recommend improvements across Microsoft Active Directory, Microsoft Entra ID, hybrid identity, cloud identity, authentication, authorization, identity governance, privileged access management (PAM), secrets management, and identity security.

· Design how identity governance, PAM, multifactor authentication (MFA), secrets management, directories, applications, and security tooling should work together.

· Establish architecture patterns for human identities, service accounts, application identities, workload identities, privileged identities, and other non-human identities.

· Define identity lifecycle, joiner/mover/leaver, access request, access review, role, entitlement, privileged access, and exception management patterns.

· Guide single sign-on (SSO), MFA, Conditional Access, federation, identity proofing, adaptive access, and application integration decisions.

· Evaluate integration approaches using application programming interfaces (APIs), connectors, System for Cross-domain Identity Management (SCIM), Security Assertion Markup Language (SAML), OAuth 2.0, OpenID Connect, and related protocols.

· Provide architecture guidance for identity across Microsoft Azure and Amazon Web Services (AWS), including cloud identity models, account structures, roles, permissions, and governance.

· Translate business, security, regulatory, and operational requirements into architecture decisions, detailed requirements, implementation sequencing, and transition plans.

· Review proposed designs and implementations for least privilege, resiliency, supportability, auditability, and alignment with approved standards.

· Partner with IAM leadership, identity engineers, analysts, application teams, cloud teams, security operations, audit, compliance, and organizational change management.

· Use PowerShell, Python, APIs, data exports, or other practical techniques when a platform limitation requires an alternate solution or automation path.

· Maintain architecture documentation, decision records, data flows, integration diagrams, control mappings, and operational standards.

· Support remediation planning for identity data quality, orphaned accounts, stale identities, over-provisioned access, service-account ownership, and privileged-access risk.

· Advise on identity monitoring, detection, incident response, and integration with existing security tooling.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)