> Markdown version of [/jobs/ext/3545215-identity-architect-i](https://www.wearedevelopers.com/jobs/ext/3545215-identity-architect-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Architect I - **Company:** Deltek, Inc - **Location:** United States (Remote available) - **Experience:** Starter - **Salary:** $124,500.0 - $219,500.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Application Integration Architecture, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Software Design Patterns, Identity and Access Management, JSON, OAuth, Software Architecture, Role-Based Access Control, Openid Connect, Azure Active Directory, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Security Assertion Markup Language (SAML), Session Management, Systems Integration, Scripting, Enterprise Software Applications, Cloud Platform System, Okta, Cyberark, Togaf, Customer Identity Access Management, HR Software, SailPoint, Restful APIs - **Published:** September 30, 2026 - **Apply:** https://sjobs.brassring.com/TGnewUI/Search/home/HomeWithPreLoad?partnerid=25397&siteid=5259&PageType=JobDetails&jobid=623531 ## About the Role * 20+ years of experience in Identity and Access Management, security architecture, or closely related disciplines, including significant enterprise architecture responsibility. * Demonstrated experience defining enterprise IAM strategy, target-state architecture, roadmaps, and reusable design patterns. * Deep expertise in Identity Governance & Administration platforms, preferably Saviynt Enterprise Identity Cloud. * Strong expertise in identity lifecycle management, RBAC, ABAC, least privilege, segregation of duties, access certification, authentication, authorization, federation, and PAM. * Experience designing identity architecture for complex enterprise environments spanning cloud, SaaS, on-premises applications, directories, and regulated workloads. * Strong knowledge of Active Directory, Microsoft Entra ID, Azure identity services, AWS IAM, and identity concepts applicable to GCP. * Strong knowledge of SAML, OAuth 2.0, OpenID Connect, SCIM, REST APIs, JSON, certificates, secrets, tokens, and modern application-integration patterns. * Experience leading enterprise IAM transformations and influencing decisions across security, infrastructure, cloud, application, product, audit, and business teams. * Ability to move between executive communication, architecture definition, design review, and hands-on technical validation. * Excellent communication, facilitation, decision-making, documentation, and stakeholder-management skills. Preferred Qualifications * Experience developing identity architecture as part of a Zero Trust security program. * Experience governing non-human identities, workload identities, secrets, service accounts, or AI agents. * Hands-on experience with PAM platforms such as Saviynt, CyberArk, BeyondTrust, or equivalent technologies. * Experience with additional IGA and identity platforms such as SailPoint, Okta, Ping Identity, Microsoft Entra ID Governance, or equivalent solutions. * Experience defining or implementing customer identity and access management solutions and B2B federation patterns. * Experience supporting SOX, SOC 1, SOC 2, NIST, FedRAMP, ISO 27001, GDPR, or similar regulatory and compliance frameworks. * Experience with scripting, APIs, orchestration, infrastructure-as-code, and automation-first engineering practices. * Relevant certifications such as Saviynt Certified Professional, CISSP, CIAM, SC-300, cloud architecture or security certifications, SABSA, or TOGAF. ## Description * Define Deltek's enterprise identity architecture and multi-year roadmap across workforce, privileged, non-human, cloud, AI-agent, partner, and customer identity domains. * Serve as the technical design authority for IAM-related initiatives and lead architecture reviews, design decisions, and exception evaluations. * Establish reference architectures, standards, integration patterns, identity data models, control requirements, and lifecycle-management principles. * Translate enterprise security, risk, compliance, user-experience, and business objectives into scalable identity capabilities. * Evaluate emerging identity technologies and recommend strategic investments, sequencing, and platform direction. * Maintain strong implementation accountability by supporting prototypes, critical integrations, design validation, and complex technical problem solving. Identity Governance & Administration * Provide architectural leadership for Saviynt Enterprise Identity Cloud and the broader IGA operating model. * Define scalable onboarding patterns and governance models for enterprise applications across SaaS, on-premises, and cloud environments. * Design identity lifecycle, RBAC, ABAC, entitlement, role-mining, segregation-of-duties, access-request, and certification strategies. * Lead integration architecture across HR systems, Active Directory, Microsoft Entra ID, cloud platforms, enterprise applications, directories, and security tooling. * Define data-quality, identity-correlation, ownership, authoritative-source, and reconciliation standards required for reliable governance. * Guide automation of provisioning, deprovisioning, birthright access, approvals, revocation, remediation, and evidence production. Privileged Access Management * Define Deltek's enterprise PAM architecture, target state, control model, and implementation roadmap. * Establish patterns for credential vaulting, session management, just-in-time and just-enough access, administrative tiering, emergency access, and privileged identity governance. * Integrate privileged access into the broader identity lifecycle, certification, policy, monitoring, and Zero Trust strategy. * Partner with Security and Infrastructure teams to reduce standing privilege and improve accountability for administrative access across critical systems. Non-Human Identity & AI-Agent Governance * Define governance models for service accounts, machine identities, workload identities, service principals, API credentials, tokens, certificates, secrets, automation identities, and AI agents. * Establish requirements for discovery, registration, accountable ownership, purpose, risk tiering, least privilege, lifecycle management, periodic certification, monitoring, and retirement. * Partner with Cloud, Security, Automation, and AI teams to define secure patterns for workload identity federation, delegated access, secrets management, approval gates, and runtime guardrails. * Help prevent orphaned identities, unmanaged credentials, excessive permissions, shadow agents, and lifecycle drift through architecture, automation, and continuous governance. ## Related Videos - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [JSON and Beyond](https://www.wearedevelopers.com/videos/968-json-and-beyond) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)