> Markdown version of [/jobs/ext/3895527-iam-architect](https://www.wearedevelopers.com/jobs/ext/3895527-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Architect

- **Company:** Indotronix Avani Group
- **Location:** Southlake, TX, United States (Remote available)
- **Experience:** Expert
- **Contract:** Temporary to permanent
- **Skills:** Active Directory, Software System Penetration Testing, Cyber Security, Domain Name System (DNS), Identity and Access Management, OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Okta, Cyberark, Information Technology, SailPoint, Terraform
- **Published:** October 23, 2026
- **Apply:** https://candidateportal.ceipal.com/job-details/a0a6_fg39T0GluHLitX0UFTtCCyYQGIJs7TIxeG2DQE

## About the Role

8+ years dedicated experience in IAM architecture or engineering managing enterprise-scale hybrid environments

 - Deep expertise in Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection, Entra Governance
 - Advanced skills in Active Directory design, replication, DNS, GPO, PKI, delegation models
 - Mastery of SSO protocols: OAuth2, OIDC, SAML, WS-Fed
 - Proven ability in identity lifecycle automation, provisioning, and Zero Trust architecture
 - Strong hands-on experience with MFA, passwordless authentication, and risk-based policy design
 - Practical knowledge of Entra Connect, federation services, and cloud-only identity patterns
 - Expertise in building Terraform IaC modules for identity services and integrating them with automated CI/CD pipelines
 - Proficiency in PowerShell scripting and automation frameworks
 - Bachelor's degree in Computer Science, Information Security, or related discipline, or equivalent experience

Preferred Skills

 - Industry certifications: SC-300, SC-100, AZ-305, or equivalent
 - Experience with Privileged Access Workstations (PAW) and Microsoft Identity Manager (MIM)
 - Familiarity with modern IAM suites: SailPoint, CyberArk, Okta
 - Background in security architecture, threat modeling, or penetration testing for identity systems, Required Qualifications* 8+ years of experience in Identity & Access Management architecture or engineering* Deep expertise in:o Microsoft Entra ID (Azure AD) Conditional Access Identity Protection Entra Governanceo Active Directory design Replication DNS GPO PKI delegation modelso SSO protocols: OAuth2 OIDC SAML WS-Fedo Identity lifecycle automation and provisioningo Zero Trust architecture principles* Strong knowledge of MFA passwordless risk-based policies and authentication flows* Experience securing hybrid identity using Entra Connect federation services and cloud-only patterns* Expertise building Terraform IaC resources and guardrails for identity services through reusable modules and automated CI/CD pipelines* Proficiency with PowerShell or automation frameworks

## Description

Join our dynamic financial technology organization as a Senior Identity & Access Management (IAM) Architect. Play a pivotal role in designing, implementing, and modernizing secure, scalable enterprise identity solutions across hybrid environments. Collaborate in-person with cross-functional engineering and architecture teams to drive the next generation of identity strategy. This is a high-impact opportunity for a technical leader who thrives in fast-paced, engineering-first environments and is passionate about advancing security frameworks and automation., Architect, implement, and maintain end-to-end IAM solutions using Microsoft Entra ID and Active Directory

 - Develop and execute long-term hybrid identity strategies aligned with security, business, and compliance requirements
 - Lead adoption of Zero Trust principles, including least-privilege access and continuous evaluation
 - Design and optimize Conditional Access policies, authentication flows, risk-based policies, and passwordless solutions
 - Govern Entra ID capabilities such as PIM, access reviews, entitlement management, and custom roles
 - Oversee secure integration of Entra applications, federations, SCIM provisioning, and SSO (OAuth2, OIDC, SAML, WS-Fed)
 - Build resilient and scalable Active Directory domains, GPO structures, and privileged access boundaries
 - Collaborate with security operations and DevSecOps to embed identity controls in landing zones and CI/CD pipelines
 - Produce comprehensive architecture diagrams, strategic roadmaps, threat models, and solution documentation