IAM Architect

Join our dynamic financial technology organization as a Senior Identity & Access Management (IAM) Architect. Play a pivotal role in designing, implementing, and modernizing secure, scalable enterprise identity solutions across hybrid environments. Collaborate in-person with cross-functional engineering and architecture teams to drive the next generation of identity strategy. This is a high-impact opportunity for a technical leader who thrives in fast-paced, engineering-first environments and is passionate about advancing security frameworks and automation., Architect, implement, and maintain end-to-end IAM solutions using Microsoft Entra ID and Active Directory

• Develop and execute long-term hybrid identity strategies aligned with security, business, and compliance requirements
• Lead adoption of Zero Trust principles, including least-privilege access and continuous evaluation
• Design and optimize Conditional Access policies, authentication flows, risk-based policies, and passwordless solutions
• Govern Entra ID capabilities such as PIM, access reviews, entitlement management, and custom roles
• Oversee secure integration of Entra applications, federations, SCIM provisioning, and SSO (OAuth2, OIDC, SAML, WS-Fed)
• Build resilient and scalable Active Directory domains, GPO structures, and privileged access boundaries
• Collaborate with security operations and DevSecOps to embed identity controls in landing zones and CI/CD pipelines
• Produce comprehensive architecture diagrams, strategic roadmaps, threat models, and solution documentation

8+ years dedicated experience in IAM architecture or engineering managing enterprise-scale hybrid environments

• Deep expertise in Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, Entra Governance
• Advanced skills in Active Directory design, replication, DNS, GPO, PKI, delegation models
• Mastery of SSO protocols: OAuth2, OIDC, SAML, WS-Fed
• Proven ability in identity lifecycle automation, provisioning, and Zero Trust architecture
• Strong hands-on experience with MFA, passwordless authentication, and risk-based policy design
• Practical knowledge of Entra Connect, federation services, and cloud-only identity patterns
• Expertise in building Terraform IaC modules for identity services and integrating them with automated CI/CD pipelines
• Proficiency in PowerShell scripting and automation frameworks
• Bachelor’s degree in Computer Science, Information Security, or related discipline, or equivalent experience

Preferred Skills

• Industry certifications: SC-300, SC-100, AZ-305, or equivalent
• Experience with Privileged Access Workstations (PAW) and Microsoft Identity Manager (MIM)
• Familiarity with modern IAM suites: SailPoint, CyberArk, Okta
• Background in security architecture, threat modeling, or penetration testing for identity systems, Required Qualifications* 8+ years of experience in Identity & Access Management architecture or engineering* Deep expertise in:o Microsoft Entra ID (Azure AD) Conditional Access Identity Protection Entra Governanceo Active Directory design Replication DNS GPO PKI delegation modelso SSO protocols: OAuth2 OIDC SAML WS-Fedo Identity lifecycle automation and provisioningo Zero Trust architecture principles* Strong knowledge of MFA passwordless risk-based policies and authentication flows* Experience securing hybrid identity using Entra Connect federation services and cloud-only patterns* Expertise building Terraform IaC resources and guardrails for identity services through reusable modules and automated CI/CD pipelines* Proficiency with PowerShell or automation frameworks

Collaborative, engineering-first work culture focused on mentorship and professional growth

• Opportunity to lead strategic technology initiatives within a secure and innovative fintech environment
• Flexible hybrid work schedule (4 days on-site, 1 day remote)
• Potential for contract extension or permanent hire based on performance